Trojaner-Board - Win32/InstallCore.XA hat mich erwischt

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Win32/InstallCore.XA hat mich erwischt (https://www.trojaner-board.de/166285-win32-installcore-xa-hat-mich-erwischt.html)

Win32/InstallCore.XA hat mich erwischt

Heute hat ein Kollege von meiner Tochter etwas heruntergeladen am Lapetop von mir, und dabei sind von G Data die Alarmglocken angegangen.
MBam laufen lassen, und es waren 23 Funde, er hat dann auf in Quarantäne verschieben gedrückt, und zusätzlich noch die Fehlermeldung von G Data auf nicht mehr anzeigen geklickt, jetzt wird da nur noch Werbung angezeigt.
Jetzt öffnet Firefox gar nicht mehr.

Eset Online Scanner laufen gelassen, hier die 3 Bedrohungen:

Code:

C:\Users\User\AppData\Local\Temp\ICReinstall_OdfAddInForOfficeSetup-de_4.0.5309.exe        Variante von Win32/InstallCore.XA evtl. unerwünschte Anwendung

C:\Users\User\Downloads\OdfAddInForOfficeSetup-de_4.0.5309.exe        Variante von Win32/InstallCore.XA evtl. unerwünschte Anwendung

C:\Users\User\Downloads\YTDSetup.exe        Variante von Win32/Toolbar.Widgi.N evtl. unerwünschte Anwendung

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-04-2015 01

Ran by User (administrator) on RWE-HOTTE on 20-04-2015 17:59:23

Running from C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBZ4KNN2

Loaded Profiles: User (Available profiles: User)

Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE

(LULU SOFTWARE LIMITED) C:\Program Files (x86)\Soda PDF 6\creator-ws.exe

(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

(Intel Corporation) C:\Windows\System32\igfxTray.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe

(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe

(Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe

(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe

(Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqste08.exe

(Hewlett-Packard Co.) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqbam08.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Hewlett-Packard) C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqgpc01.exe

(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe

(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe

(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe

(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe

(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe

(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe

(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe

(G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe

(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltSur64.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10c.exe

(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1855608 2015-02-20] (G DATA Software AG)

HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-11-28] (Geek Software GmbH)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2024800 2014-06-04] (Wondershare)

HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe,

HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)

HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31344744 2015-02-26] (Skype Technologies S.A.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-02-14]

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKU\S-1-5-21-192083289-1371779681-2328390087-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-192083289-1371779681-2328390087-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-192083289-1371779681-2328390087-1000 -> DefaultScope {8F17D790-19DE-42BC-914D-DF279FFCCEFB} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}

SearchScopes: HKU\S-1-5-21-192083289-1371779681-2328390087-1000 -> {8F17D790-19DE-42BC-914D-DF279FFCCEFB} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}

BHO: CHIP Best Deal BHO -> {7553EA3C-F8DA-4188-B7BC-956894EA54F5} -> C:\Program Files (x86)\chip\Internet Explorer\chip64.dll [2014-11-18] ()

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-02-23] (Oracle Corporation)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-02-23] (Oracle Corporation)

BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20] (Hewlett-Packard Co.)

BHO-x32: CHIP Best Deal BHO -> {7553EA3C-F8DA-4188-B7BC-956894EA54F5} -> C:\Program Files (x86)\chip\Internet Explorer\chip32.dll [2014-11-18] ()

BHO-x32: Soda PDF 6 Helper -> {ACEC6276-3D7B-4AA9-BE79-23520A23026D} -> C:\Program Files (x86)\Soda PDF 6\creator-ie-helper.dll [2014-02-20] (LULU SOFTWARE LIMITED)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)

BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20] (Hewlett-Packard Co.)

Toolbar: HKLM-x32 - Soda PDF 6 Toolbar - {35251526-B7A4-44E4-8B2E-FD62AE267B82} - C:\Program Files (x86)\Soda PDF 6\creator-ie-plugin.dll [2014-02-20] (LULU SOFTWARE LIMITED)

DPF: HKLM-x32 {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.com/select/asusTek_sys_ctrl3.cab

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.192.1
 

FireFox:

========

FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default

FF SelectedSearchEngine: Yahoo!

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()

FF Plugin: @java.com/DTPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-02-23] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-02-23] (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin-x32: Soda PDF 6 -> C:\Program Files (x86)\Soda PDF 6\np-previewer.dll [2014-02-20] (LULU SOFTWARE LIMITED)

FF user.js: detected! => C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\user.js [2015-04-20]

FF Extension: CHIP Best Deal - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\Extensions\ciuvo-extension@chip.de.xpi [2015-03-18]

FF Extension: PAYBACK Internet Assistent fuer Firefox - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\Extensions\toolbar-ff@payback.de.xpi [2015-04-02]

FF Extension: Digital More - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\Extensions\{bc1f498e-2a46-489a-b4e8-54621ed44de5}.xpi [2015-04-20]

FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-04-08]

FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-02-14]

FF HKLM-x32\...\Firefox\Extensions: [soda_pdf_6_conv@sodapdf.com] - C:\Program Files (x86)\Soda PDF 6\resources\firefoxextension

FF Extension: Soda PDF 6 Creator - C:\Program Files (x86)\Soda PDF 6\resources\firefoxextension [2015-03-10]

FF HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider) [File not signed]

R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2528888 2015-04-16] (G Data Software AG)

R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [965240 2015-02-20] (G Data Software AG)

R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [3672560 2015-04-07] (G Data Software AG)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)

R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [3193080 2015-02-20] (G Data Software AG)

R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [789112 2015-03-04] (G Data Software AG)

R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]

R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed]

R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89864 2014-12-11] (Hewlett-Packard Company)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-12] (Intel Corporation)

S3 LULU Software CrashHandler; C:\Program Files (x86)\Soda PDF 6\crash-handler-ws.exe [744800 2014-02-20] (LULU SOFTWARE LIMITED)

S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]

S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]

S3 Soda PDF 6; C:\Program Files (x86)\Soda PDF 6\ws.exe [1573728 2014-02-20] (LULU SOFTWARE LIMITED)

R2 Soda PDF 6 Creator; C:\Program Files (x86)\Soda PDF 6\creator-ws.exe [620384 2014-02-20] (LULU SOFTWARE LIMITED)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-02-25] (Atheros) [File not signed]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R3 ATP; C:\Windows\System32\DRIVERS\AsusTP.sys [71952 2014-03-31] (ASUS Corporation)

R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [150016 2015-04-15] (G Data Software AG)

R3 GDKBB; C:\Windows\system32\drivers\GDKBB64.sys [27648 2015-04-15] (G Data Software AG)

R1 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [20992 2015-04-15] (G Data Software AG)

R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [230400 2015-04-15] (G Data Software AG)

R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [75776 2015-04-15] (G Data Software AG)

R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64512 2015-04-20] (G Data Software AG)

R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2015-02-16] (G Data Software)

R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [124928 2015-04-15] (G Data Software AG)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-04-20] (Malwarebytes Corporation)

R3 TXEIx64; C:\Windows\System32\DRIVERS\TXEIx64.sys [88592 2014-02-17] (Intel Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-04-20 17:59 - 2015-04-20 17:59 - 00000000 ____D () C:\FRST

2015-04-20 17:49 - 2015-04-20 17:49 - 00000377 _____ () C:\Users\User\Desktop\eset online scanner.txt

2015-04-20 15:07 - 2015-04-20 15:07 - 00000000 ____D () C:\Program Files (x86)\ESET

2015-04-20 15:06 - 2015-04-20 15:06 - 02347384 _____ (ESET) C:\Users\User\Downloads\esetsmartinstaller_deu.exe

2015-04-20 13:50 - 2015-04-20 13:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA INTERNET SECURITY

2015-04-20 13:49 - 2015-04-20 13:49 - 00002058 _____ () C:\Windows\DPINST.LOG

2015-04-20 13:15 - 2015-04-20 13:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\OpenOffice

2015-04-20 13:14 - 2015-04-20 13:14 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk

2015-04-20 13:14 - 2015-04-20 13:14 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1

2015-04-20 13:13 - 2015-04-20 13:13 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4

2015-04-20 13:09 - 2015-04-20 13:10 - 00000000 ____D () C:\Users\User\Desktop\OpenOffice 4.0.1 (de) Installation Files

2015-04-20 13:00 - 2015-04-20 13:00 - 00001179 _____ () C:\Users\User\Desktop\Die Installation von ODF Add-in für Microsoft Office 4.0 fortsetzen.lnk

2015-04-20 12:58 - 2015-04-20 12:58 - 04911297 _____ () C:\Users\User\Downloads\OdfAddInForOfficeSetup-de_4.0.5309 [1].exe

2015-04-20 12:57 - 2015-04-20 12:58 - 00766640 _____ (Prog ) C:\Users\User\Downloads\OdfAddInForOfficeSetup-de_4.0.5309.exe

2015-04-20 12:51 - 2015-04-20 12:52 - 00064834 _____ () C:\Users\User\Desktop\DP Mai-1.odt

2015-04-15 11:28 - 2015-04-15 11:28 - 00381727 _____ () C:\Users\User\Downloads\Winflash_Win81_64_VER2420.zip

2015-04-15 11:23 - 2015-04-15 11:23 - 00357797 _____ () C:\Users\User\Downloads\Winflash_WIN7_32_64_z2301.zip

2015-04-15 11:08 - 2015-04-15 11:08 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-04-15 11:08 - 2015-04-15 11:08 - 00000000 ____D () C:\Windows\system32\appraiser

2015-04-15 10:58 - 2013-08-01 11:33 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll

2015-04-15 10:56 - 2015-04-15 10:57 - 06401659 _____ () C:\Users\User\Downloads\Chipset_Intel_Win7_64_VER9441006.zip

2015-04-15 10:52 - 2015-04-15 10:52 - 00381727 _____ () C:\Users\User\Downloads\WinFlash_Win7_32_VER2420.zip

2015-04-15 10:50 - 2015-04-15 10:50 - 00000000 ____D () C:\Users\User\Downloads\WinFlash_Win7_64_VER301(1)

2015-04-15 10:49 - 2015-04-15 10:49 - 00909962 _____ () C:\Users\User\Downloads\WinFlash_Win7_64_VER301(1).zip

2015-04-15 10:48 - 2015-04-15 10:48 - 00909962 _____ () C:\Users\User\Downloads\WinFlash_Win7_64_VER301.zip

2015-04-15 10:45 - 2015-04-15 10:45 - 00003130 _____ () C:\Windows\System32\Tasks\{C653AA2D-C29F-4BDB-9763-6D35C4490CC9}

2015-04-15 10:38 - 2015-04-15 10:38 - 00027648 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBB64.sys

2015-04-15 10:38 - 2015-04-15 10:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_GDKBB64_01007.Wdf

2015-04-15 10:23 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-04-15 10:23 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-04-15 10:23 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-04-15 10:23 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-04-15 10:23 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-04-15 10:23 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-04-15 10:23 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-04-15 10:23 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-04-15 10:23 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-04-15 10:23 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-04-15 10:23 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-04-15 10:23 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-04-15 10:23 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-04-15 10:23 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-04-15 10:23 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-04-15 10:23 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-04-15 10:23 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-04-15 10:23 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-04-15 10:23 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-04-15 10:23 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-04-15 10:23 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-04-15 10:23 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2015-04-15 10:23 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2015-04-15 10:23 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-04-15 10:23 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-04-15 10:23 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2015-04-15 10:23 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2015-04-15 10:23 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-04-15 10:23 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-04-15 10:23 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-04-15 10:23 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-04-15 10:23 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-04-15 10:23 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2015-04-15 10:23 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2015-04-15 10:23 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2015-04-15 10:23 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-04-15 10:23 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-04-15 10:23 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2015-04-15 10:23 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-04-15 10:23 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2015-04-15 10:23 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-04-15 10:23 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2015-04-15 10:23 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2015-04-15 10:23 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2015-04-15 10:23 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-04-15 10:23 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-04-15 10:23 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-04-15 10:23 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-04-15 10:23 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-04-15 10:23 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-04-15 10:23 - 2015-01-28 01:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2015-04-15 10:22 - 2015-04-02 02:17 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-04-15 10:22 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-04-15 10:22 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-04-15 10:22 - 2015-03-13 06:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-04-15 10:22 - 2015-03-13 06:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-04-15 10:22 - 2015-03-13 06:09 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-04-15 10:22 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-04-15 10:22 - 2015-03-13 06:08 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-04-15 10:22 - 2015-03-13 06:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-04-15 10:22 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-04-15 10:22 - 2015-03-13 06:06 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-04-15 10:22 - 2015-03-13 06:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-04-15 10:22 - 2015-03-13 05:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-04-15 10:22 - 2015-03-13 05:55 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-04-15 10:22 - 2015-03-13 05:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-04-15 10:22 - 2015-03-13 05:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-04-15 10:22 - 2015-03-13 05:53 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-04-15 10:22 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-04-15 10:22 - 2015-03-13 05:44 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-04-15 10:22 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-04-15 10:22 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-04-15 10:22 - 2015-03-13 05:40 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-04-15 10:22 - 2015-03-13 05:32 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-04-15 10:22 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-04-15 10:22 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-04-15 10:22 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-04-15 10:22 - 2015-03-13 05:27 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-04-15 10:22 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-04-15 10:22 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-04-15 10:22 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-04-15 10:22 - 2015-03-13 05:23 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-04-15 10:22 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-04-15 10:22 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-04-15 10:22 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-04-15 10:22 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-04-15 10:22 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-04-15 10:22 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-04-15 10:22 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-04-15 10:22 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-04-15 10:22 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-04-15 10:22 - 2015-03-13 05:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-04-15 10:22 - 2015-03-13 05:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-04-15 10:22 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-04-15 10:22 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-04-15 10:22 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-04-15 10:22 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-04-15 10:22 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-04-15 10:22 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-04-15 10:22 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-04-15 10:22 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-04-15 10:22 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-04-15 10:22 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-04-15 10:22 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-04-15 10:22 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-04-15 10:22 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-04-15 10:22 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-04-15 10:22 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-04-15 10:22 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-04-15 10:22 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2015-04-15 10:22 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll

2015-04-15 10:22 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll

2015-04-15 10:22 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys

2015-04-15 10:11 - 2015-04-15 10:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in

2015-04-08 22:46 - 2015-04-08 22:52 - 581496318 _____ () C:\Users\User\Downloads\Illuminati_2015-04-06_2015_122688.mp4

2015-04-08 22:45 - 2015-04-08 22:51 - 491444971 _____ () C:\Users\User\Downloads\Die_Comedy_Couch_mit_Kim_Fisher_2015-04-07_0220_122688.mp4

2015-04-08 22:17 - 2015-04-08 22:35 - 425881968 _____ () C:\Users\User\Downloads\Ohne_Ausweg_2015-04-06_0345_122688.mp4

2015-04-08 22:16 - 2015-04-08 22:45 - 761037373 _____ () C:\Users\User\Downloads\Die_Schlager_des_Jahres_2014_2015-04-06_0845_122688.mp4

2015-04-08 22:16 - 2015-04-08 22:24 - 140148029 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-04-05_2345_122688.mp4

2015-04-08 22:15 - 2015-04-08 22:36 - 556524950 _____ () C:\Users\User\Downloads\Das_goldene_Ufer_2015-04-06_0255_122688.mp4

2015-04-08 22:15 - 2015-04-08 22:34 - 390949119 _____ () C:\Users\User\Downloads\Steven_Seagal_Kill_Switch_2015-04-06_0220_122688.mp4

2015-04-08 22:14 - 2015-04-08 22:40 - 930313604 _____ () C:\Users\User\Downloads\Rosamunde_Pilcher_Ein_einziger_Kuss_2015-04-06_2015_122688.mp4

2015-04-08 22:14 - 2015-04-08 22:35 - 204528270 _____ () C:\Users\User\Downloads\Der_Koenig_von_Mallorca_Das_Phaenomen_Jue_2015-04-06_2210_122688.mp4

2015-04-08 22:14 - 2015-04-08 22:34 - 419401949 _____ () C:\Users\User\Downloads\Alarmstufe_Rot_2_2015-04-07_0045_122688.mp4

2015-04-08 22:14 - 2015-04-08 22:33 - 424242424 _____ () C:\Users\User\Downloads\G_I_Joe_Die_Abrechnung_2015-04-06_2015_122688.mp4

2015-04-08 22:13 - 2015-04-08 22:36 - 574859351 _____ () C:\Users\User\Downloads\Belle_de_Jour_Schoene_des_Tages_2015-04-07_2350_122688.mp4

2015-04-08 22:13 - 2015-04-08 22:34 - 465449132 _____ () C:\Users\User\Downloads\Depression_Eine_Krankheit_erobert_die__2015-04-08_0245_122688.mp4

2015-04-08 22:13 - 2015-04-08 22:17 - 145707400 _____ () C:\Users\User\Downloads\Das_Beste_aus_Verstehen_Sie_Spass__2015-04-08_0415_122688.mp4

2015-04-08 17:32 - 2015-04-08 17:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2015-04-07 06:58 - 2015-04-07 06:58 - 00000000 ___SD () C:\Windows\SysWOW64\GWX

2015-04-07 06:58 - 2015-04-07 06:58 - 00000000 ___SD () C:\Windows\system32\GWX

2015-04-06 15:09 - 2015-01-29 03:18 - 906833541 _____ () C:\Users\User\Desktop\96 hours Taken 3.mkv

2015-04-06 15:04 - 2015-04-07 14:06 - 00000000 ____D () C:\Users\User\Documents\Peter

2015-04-06 14:32 - 2015-04-06 14:39 - 585113309 _____ () C:\Users\User\Downloads\The_Da_Vinci_Code_Sakrileg_2015-04-04_2215_122688.mp4

2015-04-06 14:29 - 2015-04-06 14:33 - 193020536 _____ () C:\Users\User\Downloads\Sportschau_2015-04-05_1845_122688.mp4

2015-04-06 14:26 - 2015-04-06 14:32 - 323286126 _____ () C:\Users\User\Downloads\Wacken_2013_Anthrax_Live_Musik_vom_Wacken_Festival_2015-04-05_0405_122688.mp4

2015-04-06 14:25 - 2015-04-06 14:32 - 323349234 _____ () C:\Users\User\Downloads\Wacken_2013_Alice_Cooper_und_Motoerhead_Live_Musik_vo_2015-04-04_2110_122688.mp4

2015-04-06 14:23 - 2015-04-06 14:35 - 723666773 _____ () C:\Users\User\Downloads\Das_Beste_aus_30_Jahren_Verstehen_Sie_S_2015-04-04_2015_122688.mp4

2015-04-06 14:23 - 2015-04-06 14:32 - 482955102 _____ () C:\Users\User\Downloads\Bella_Block_Die_schoenste_Nacht_des_Lebens_2015-04-04_2015_122688.mp4

2015-04-06 14:21 - 2015-04-06 14:27 - 496576732 _____ () C:\Users\User\Downloads\das_aktuelle_sportstudio_2015-04-04_2300_122688.mp4

2015-04-05 18:49 - 2015-04-05 18:49 - 00000000 ____D () C:\Users\User\Desktop\Uploader.Presents-Non.Stop.TS.MD.German.x264.READ

2015-04-04 15:48 - 2015-04-04 15:52 - 334543890 _____ () C:\Users\User\Downloads\Brain_Games_Teste_Dein_Gehirn_6__2015-04-03_2015_122688.mp4

2015-04-04 15:48 - 2015-04-04 15:52 - 274013340 _____ () C:\Users\User\Downloads\zdf_bauhaus_Tim_Bendzko_2015-04-04_0415_122688.mp4

2015-04-04 15:48 - 2015-04-04 15:48 - 496843927 _____ () C:\Users\User\Downloads\Geheimnis_im_blauen_Schloss_2015-04-04_0255_122688.mp4

2015-04-04 15:48 - 2015-04-04 15:48 - 489822247 _____ () C:\Users\User\Downloads\Der_Pfarrer_und_das_Maedchen_2015-04-03_2115_122688.mp4

2015-04-04 14:19 - 2015-04-04 14:33 - 499372189 _____ () C:\Users\User\Downloads\Die_Alpen_Unsere_Berge_von_oben_2015-04-03_2015_122688.mp4

2015-04-04 14:18 - 2015-04-04 14:34 - 379646136 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-03-27_2200_122688.mp4

2015-04-04 14:17 - 2015-04-04 14:34 - 710178099 _____ () C:\Users\User\Downloads\Papillon_2015-03-26_0155_122688.mp4

2015-04-04 14:17 - 2015-04-04 14:29 - 426540402 _____ () C:\Users\User\Downloads\Utta_Danella_Lisa_schwimmt_sich_frei_2015-03-27_2015_122688.mp4

2015-04-04 13:55 - 2015-04-04 14:15 - 923278063 _____ () C:\Users\User\Downloads\Echo_2015_Der_deutsche_Musikpreis_2015-03-26_2015_122688.mp4

2015-04-04 13:53 - 2015-04-04 14:10 - 467415232 _____ () C:\Users\User\Downloads\Road_Trip_2_Die_Biermeister_2015-03-29_0355_122688.mp4

2015-04-04 13:52 - 2015-04-04 14:10 - 387451172 _____ () C:\Users\User\Downloads\Unverschaemtes_Glueck_2015-03-25_2015_122688.mp4

2015-04-04 13:51 - 2015-04-04 14:11 - 553643365 _____ () C:\Users\User\Downloads\Eat_Pray_Love_2015-03-25_2015_122688.mp4

2015-04-04 13:51 - 2015-04-04 14:06 - 394090467 _____ () C:\Users\User\Downloads\Alleine_war_gestern_2015-03-24_1830_122688.mp4

2015-04-04 13:50 - 2015-04-04 14:10 - 554833981 _____ () C:\Users\User\Downloads\Lady_Chatterley_2015-03-25_0105_122688.mp4

2015-04-04 13:50 - 2015-04-04 14:05 - 351144329 _____ () C:\Users\User\Downloads\Walking_Tall_Auf_eigene_Faust_2015-04-02_2205_122688.mp4

2015-04-04 13:49 - 2015-04-04 14:13 - 828554760 _____ () C:\Users\User\Downloads\Willkommen_bei_Carmen_Nebel_Stars_Musik_und_Ueberraschungen_aus_Hann_2015-04-02_2015_122688.mp4

2015-04-04 13:49 - 2015-04-04 14:11 - 596105607 _____ () C:\Users\User\Downloads\Rossini_Oder_die_moerderische_Frage_we_2015-04-02_2300_122688.mp4

2015-04-04 13:49 - 2015-04-04 14:08 - 473257040 _____ () C:\Users\User\Downloads\Tatort_Verdammt_2015-04-02_2015_122688.mp4

2015-04-03 19:42 - 2015-04-03 19:47 - 145286478 _____ () C:\Users\User\Downloads\Sportclub_Stars_Martin_Schwalb_2015-03-22_2345_122688.mp4

2015-04-03 19:41 - 2015-04-03 19:52 - 537408889 _____ () C:\Users\User\Downloads\Opa_wird_verkauft_2015-03-21_2015_122688.mp4

2015-04-03 19:41 - 2015-04-03 19:48 - 291670270 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-03-18_2345_122688.mp4

2015-04-03 19:37 - 2015-04-03 19:47 - 458530158 _____ () C:\Users\User\Downloads\The_Team_Folge3_2015-03-22_2200_122688.mp4

2015-04-03 19:37 - 2015-04-03 19:45 - 365816657 _____ () C:\Users\User\Downloads\Marie_Brand_und_der_schoene_Schein_2015-03-14_2015_122688.mp4

2015-04-03 19:36 - 2015-04-03 19:47 - 475388247 _____ () C:\Users\User\Downloads\Schmetterling_und_Taucherglocke_2015-03-12_2225_122688.mp4

2015-04-03 19:20 - 2015-04-03 19:26 - 159506669 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-22_2345_122688.mp4

2015-04-03 19:19 - 2015-04-03 19:30 - 475158512 _____ () C:\Users\User\Downloads\The_Team_Folge2_2015-03-15_2200_122688.mp4

2015-04-03 19:19 - 2015-04-03 19:25 - 117573359 _____ () C:\Users\User\Downloads\Kalabrien_Italiens_vergessene_Region_2015-03-23_0410_122688.mp4

2015-04-03 19:17 - 2015-04-03 19:28 - 327330406 _____ () C:\Users\User\Downloads\Opa_ledig_jung_2015-03-13_2015_122688.mp4

2015-04-03 19:17 - 2015-04-03 19:25 - 229733322 _____ () C:\Users\User\Downloads\WISO_2015-03-10_0255_122688.mp4

2015-04-03 19:16 - 2015-04-03 19:30 - 454030000 _____ () C:\Users\User\Downloads\Wanderlust_Der_Trockenmauerweg_Mallorca_Der_Steve_2015-03-15_2015_122688.mp4

2015-04-03 19:16 - 2015-04-03 19:30 - 430891971 _____ () C:\Users\User\Downloads\Wunderschoen_Die_Vulkaninseln_Siziliens_Urlaub_auf__2015-03-15_2015_122688.mp4

2015-04-03 19:16 - 2015-04-03 19:28 - 358713981 _____ () C:\Users\User\Downloads\Das_haelt_kein_Jahr__2015-03-15_2015_122688.mp4

2015-04-03 19:15 - 2015-04-03 19:19 - 132355849 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-08_2345_122688.mp4

2015-04-03 14:25 - 2015-04-03 14:30 - 431214813 _____ () C:\Users\User\Downloads\Wunderschoen_Die_Algarve_Portugals_sonniger_Sueden_2015-03-15_1415_122688.mp4

2015-04-03 14:24 - 2015-04-03 14:26 - 129831763 _____ () C:\Users\User\Downloads\ZDFzoom_Die_Dortmund_Story_2015-03-18_2315_122688.mp4

2015-04-03 13:49 - 2015-04-03 13:58 - 423648302 _____ () C:\Users\User\Downloads\Love_Happens_2015-03-11_2015_122688.mp4

2015-04-03 13:48 - 2015-04-03 13:58 - 535812526 _____ () C:\Users\User\Downloads\The_Voice_Kids_2015-03-13_2015_122688.mp4

2015-04-03 13:48 - 2015-04-03 13:50 - 79013784 _____ () C:\Users\User\Downloads\Hollands_sonniger_Sueden_Ferien_an_der_Nordseekueste_von_Zeeland_2015-03-09_0445_122688.mp4

2015-04-03 13:46 - 2015-04-03 13:58 - 567107616 _____ () C:\Users\User\Downloads\The_Voice_Kids_2015-03-27_2015_122688.mp4

2015-04-03 13:45 - 2015-04-03 13:55 - 422966784 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-04-02_2325_122688.mp4

2015-04-03 13:43 - 2015-04-03 13:51 - 475543075 _____ () C:\Users\User\Downloads\Tatort_Happy_Birthday_Sarah_2015-03-31_2015_122688.mp4

2015-04-03 13:43 - 2015-04-03 13:47 - 393050126 _____ () C:\Users\User\Downloads\Tatort_Spiel_auf_Zeit_2015-03-27_2200_122688.mp4

2015-03-31 21:23 - 2015-04-01 23:26 - 00634880 _____ () C:\Users\User\Desktop\Stundenerhebung März 2015.xls

2015-03-29 20:35 - 2015-03-29 22:22 - 00000000 ____D () C:\Users\User\Desktop\Beratungsgespräche

2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2015-03-29 12:22 - 2015-03-29 12:22 - 13087456 _____ (Microsoft Corporation) C:\Users\User\Downloads\Silverlight_x64.exe

2015-03-27 16:08 - 2015-03-27 16:09 - 00000000 ____D () C:\Users\User\Desktop\Microsoft Office Professional 2003 SP3 Deutsch Ger

2015-03-27 16:02 - 2015-03-27 16:02 - 00000000 ____D () C:\Users\User\Documents\Drucken

2015-03-27 16:02 - 2013-06-06 15:53 - 00565760 _____ () C:\Users\User\Documents\Stundenerhebung Juni 2013.xls

2015-03-27 16:02 - 2013-05-23 00:10 - 00038400 _____ () C:\Users\User\Documents\Verkauf.xls

2015-03-27 16:02 - 2011-01-12 14:15 - 283741092 _____ () C:\Users\User\Documents\Thyssen Krupp Film von SMS .avi

2015-03-27 16:01 - 2011-01-12 13:58 - 269262848 _____ () C:\Users\User\Documents\CAP0199_DE.576p25.mpeg-1.mpg

2015-03-26 14:33 - 2015-03-26 14:34 - 00000000 ____D () C:\Users\User\Documents\Saison Übersicht Gladbach

2015-03-26 14:29 - 2015-03-26 14:33 - 00000000 ____D () C:\Users\User\Documents\AK Fussball Spieler ABC

2015-03-25 16:14 - 2015-03-25 16:17 - 207146482 _____ () C:\Users\User\Downloads\Marius_Mueller_Westernhagen_Live_in_Base_2015-02-28_2015_122688.mp4

2015-03-25 16:13 - 2015-03-25 16:18 - 422494491 _____ () C:\Users\User\Downloads\Die_Rosel_vom_Schwarzwald_2015-02-28_2015_122688.mp4

2015-03-25 15:48 - 2015-03-25 15:52 - 541919016 _____ () C:\Users\User\Downloads\Die_Dolmetscherin_2015-02-28_2015_122688.mp4

2015-03-25 15:47 - 2015-03-25 15:50 - 289777406 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-02-25_2345_122688.mp4

2015-03-25 15:47 - 2015-03-25 15:49 - 116264599 _____ () C:\Users\User\Downloads\ZDFzoom_Vorsicht_Kreditfalle_Wie_Kunden_abgezoc_2015-02-25_2315_122688.mp4

2015-03-25 15:11 - 2015-03-25 15:28 - 407051367 _____ () C:\Users\User\Downloads\Das_Ende_einer_Affaere_2015-02-24_2200_122688.mp4

2015-03-25 15:11 - 2015-03-25 15:18 - 192852896 _____ () C:\Users\User\Downloads\X_Factor_Das_Unfassbare_Der_Kartengeber_Trinkgeld_Der_Baecker_Folge26_2015-02-28_0700_122688.mp4

2015-03-25 15:11 - 2015-03-25 15:17 - 129795686 _____ () C:\Users\User\Downloads\Die_Joerg_Knoer_Show_Sketche_und_Parodien_um_Prominente_2015-02-23_2245_122688.mp4

2015-03-25 15:10 - 2015-03-25 15:27 - 403718741 _____ () C:\Users\User\Downloads\In_einer_heissen_Nacht_2015-03-02_0040_122688.mp4

2015-03-25 15:09 - 2015-03-25 15:29 - 480413168 _____ () C:\Users\User\Downloads\The_Team_Folge1_2015-03-08_2200_122688.mp4

2015-03-25 15:09 - 2015-03-25 15:18 - 154281116 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-02_0340_122688.mp4

2015-03-25 15:06 - 2015-03-25 15:21 - 396215436 _____ () C:\Users\User\Downloads\Blauwasserleben_2015-03-15_2015_122688.mp4

2015-03-25 15:06 - 2015-03-25 15:20 - 404006823 _____ () C:\Users\User\Downloads\Polizeiruf_110_Tod_im_Kraftwerk_2015-03-10_2250_122688.mp4

2015-03-25 15:06 - 2015-03-25 15:17 - 440482775 _____ () C:\Users\User\Downloads\Liebling_wir_haben_geerbt__2015-02-25_0905_122688.mp4

2015-03-25 10:01 - 2015-03-25 10:04 - 368467353 _____ () C:\Users\User\Downloads\Tatort_Das_Muli_2015-03-22_2015_122688.mp4

2015-03-22 19:02 - 2015-03-22 19:03 - 00001249 _____ () C:\DelFix.txt

2015-03-22 19:02 - 2015-03-22 19:02 - 00000000 ____D () C:\Windows\ERUNT

2015-03-21 22:23 - 2015-03-21 22:34 - 468156595 _____ () C:\Users\User\Downloads\Die_Seelen_im_Feuer_2015-03-02_2015_122688.mp4

2015-03-21 22:20 - 2015-03-21 22:33 - 513609719 _____ () C:\Users\User\Downloads\The_Voice_Kids_2015-03-06_2015_122688.mp4

2015-03-21 22:20 - 2015-03-21 22:33 - 416634458 _____ () C:\Users\User\Downloads\Vier_kriegen_ein_Kind_2015-03-06_2015_122688.mp4

2015-03-21 22:19 - 2015-03-21 22:31 - 510220360 _____ () C:\Users\User\Downloads\Das_letzte_Schweigen_2015-02-21_0220_122688.mp4

2015-03-21 22:18 - 2015-03-21 22:30 - 352586102 _____ () C:\Users\User\Downloads\Der_Kotzbrocken_2015-02-20_2015_122688.mp4

2015-03-21 22:18 - 2015-03-21 22:23 - 250116989 _____ () C:\Users\User\Downloads\Der_Staatsanwalt_Toedlicher_Ehrgeiz_2015-02-20_2015_122688.mp4

2015-03-21 22:18 - 2015-03-21 22:22 - 165304595 _____ () C:\Users\User\Downloads\Die_Komiker_Bairisch_Comedy_100_Folge_Die_Komike_2015-02-20_2215_122688.mp4

2015-03-21 22:13 - 2015-03-21 22:16 - 321761282 _____ () C:\Users\User\Downloads\Tatort_Das_Haus_am_Ende_der_Strasse_2015-02-22_2015_122688.mp4

2015-03-21 22:09 - 2015-03-21 22:15 - 403602185 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-02-22_0935_122688.mp4

2015-03-21 22:08 - 2015-03-21 22:14 - 378015492 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-03-20_2145_122688.mp4

2015-03-21 22:08 - 2015-03-21 22:14 - 348373873 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-02-27_2145_122688.mp4

2015-03-21 22:08 - 2015-03-21 22:14 - 345261336 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-03-13_2145_122688.mp4
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-04-20 17:56 - 2015-01-08 12:03 - 01343715 _____ () C:\Windows\WindowsUpdate.log

2015-04-20 17:15 - 2015-02-14 13:24 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-04-20 16:21 - 2015-03-18 21:14 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-04-20 13:49 - 2015-02-13 17:16 - 00064512 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys

2015-04-20 13:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared

2015-04-20 13:38 - 2009-07-14 06:45 - 00021680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-04-20 13:38 - 2009-07-14 06:45 - 00021680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-04-20 13:36 - 2011-04-12 09:43 - 00698926 _____ () C:\Windows\system32\perfh007.dat

2015-04-20 13:36 - 2011-04-12 09:43 - 00149034 _____ () C:\Windows\system32\perfc007.dat

2015-04-20 13:36 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-04-20 13:35 - 2015-02-16 08:20 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps

2015-04-20 13:30 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-04-20 13:29 - 2009-07-14 06:45 - 00441024 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-04-20 13:08 - 2015-02-24 16:29 - 00000000 ____D () C:\Users\User\Documents\Autogrammadresse, Listen, Briefe

2015-04-20 12:46 - 2015-03-13 08:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype

2015-04-20 10:31 - 2015-02-19 18:01 - 00000000 ____D () C:\Users\User\Desktop\Sarah

2015-04-18 21:52 - 2015-02-14 13:33 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc

2015-04-18 18:26 - 2015-02-14 16:14 - 00000000 ____D () C:\Users\User\AppData\Roaming\UseNeXT

2015-04-18 18:23 - 2015-03-12 08:18 - 00000000 ____D () C:\Users\User\Documents\UseNeXT

2015-04-17 17:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

2015-04-17 17:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat

2015-04-17 10:38 - 2015-02-26 15:42 - 00000000 ____D () C:\Users\User\Documents\Eigene Scans

2015-04-15 21:32 - 2015-02-25 12:05 - 00000000 ____D () C:\Users\User\Documents\Abrechnungen Honorardozent

2015-04-15 11:06 - 2015-01-08 14:08 - 01592784 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2015-04-15 11:03 - 2015-02-13 18:29 - 00000000 ____D () C:\Windows\system32\MRT

2015-04-15 10:59 - 2015-02-13 18:29 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-04-15 10:58 - 2015-02-09 23:07 - 00000000 ____D () C:\Program Files (x86)\Intel

2015-04-15 10:40 - 2015-02-13 17:17 - 00075776 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys

2015-04-15 10:38 - 2015-02-13 17:16 - 00020992 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBFlt64.sys

2015-04-15 10:37 - 2015-02-13 17:16 - 00230400 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys

2015-04-15 10:37 - 2015-02-13 17:16 - 00150016 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys

2015-04-15 10:37 - 2015-02-13 17:16 - 00124928 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys

2015-04-15 10:16 - 2015-02-14 13:24 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-04-15 10:16 - 2015-02-14 13:24 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-04-15 10:16 - 2015-02-14 13:24 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-04-15 10:11 - 2015-01-08 14:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office

2015-04-15 10:01 - 2015-01-08 13:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2015-04-09 19:35 - 2015-03-05 17:09 - 00000000 ____D () C:\Users\User\Desktop\Karina

2015-04-07 21:17 - 2015-02-17 22:29 - 00000000 ____D () C:\Users\User\Desktop\Qualitätshandbuch neu

2015-04-07 17:18 - 2015-02-20 19:37 - 00049152 _____ () C:\Users\User\Desktop\Autogrammanforderung 2014.xls

2015-04-04 14:07 - 2015-03-19 17:04 - 00000000 ____D () C:\Users\User\Downloads\Save TV

2015-03-22 19:05 - 2015-03-18 22:02 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2015-03-22 18:58 - 2015-03-18 22:18 - 00000000 ____D () C:\Windows\erdnt
 

==================== Files in the root of some directories =======
 

2015-02-13 17:16 - 2015-02-13 17:16 - 0000000 _____ () C:\Users\User\AppData\Roaming\gdfw.log

2015-02-13 17:16 - 2015-02-13 17:16 - 0000779 _____ () C:\Users\User\AppData\Roaming\gdscan.log

2015-02-14 13:57 - 2015-03-03 23:49 - 0001324 _____ () C:\ProgramData\hpzinstall.log
 

Some content of TEMP:

====================

C:\Users\User\AppData\Local\Temp\ICReinstall_OdfAddInForOfficeSetup-de_4.0.5309.exe
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-04-17 17:42
 

==================== End Of Log ============================

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-04-2015 01

Ran by User at 2015-04-20 18:00:58

Running from C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JBZ4KNN2

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: G DATA INTERNET SECURITY (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}

AS: G DATA INTERNET SECURITY (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: G*DATA Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden

Adobe Flash Player 10 ActiveX (HKLM-x32\...\{B7B3E9B3-FB14-4927-894B-E9124509AF5A}) (Version: 10.0.32.18 - Adobe Systems, Inc.)

Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)

Anti-Twin (Installation 20.02.2015) (HKLM-x32\...\Anti-Twin 2015-02-20 20.44.25) (Version:  - Joerg Rosenthal, Germany)

ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.14 - ASUS)

BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden

CCleaner (HKLM\...\CCleaner) (Version: 5.02 - Piriform)

CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5306 - CDBurnerXP)

CHIP Best Deal (HKLM-x32\...\{7553EA3C-F8DA-4188-B7BC-956894EA54F5}) (Version: 1.4.21 - Ciuvo GmbH)

Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden

Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden

DJ_AIO_03_F4200_Software_Min (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden

ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.0.20150211 - Landesfinanzdirektion Thüringen)

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )

F4200 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden

G DATA INTERNET SECURITY (HKLM-x32\...\{AC68D2FF-1674-4C16-A536-A69FC11BBD82}) (Version: 25.1.0.4 - G DATA Software AG)

GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden

HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)

HP Deskjet F4200 All-In-One Driver Software 13.0 Rel. 3 (HKLM\...\{A00C9114-40E6-4C70-A619-7DF264B23485}) (Version: 13.0 - HP)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)

HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Support Solutions Framework (HKLM-x32\...\{E35601C0-BA8E-4F32-919A-C7EF4CA81F67}) (Version: 11.51.0048 - Hewlett-Packard Company)

HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)

HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden

HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden

HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden

HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden

HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden

HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)

Java 7 Update 75 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417075FF}) (Version: 7.0.750 - Oracle)

Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden

Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)

Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.1.1 - Mozilla)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)

PDF24 Creator 6.9.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)

Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.318 - Qualcomm Atheros Communications)

Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.27040 - Realtek Semiconductor Corp.)

Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)

Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)

Skype™ 7.2 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.2.103 - Skype Technologies S.A.)

SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden

Soda PDF 6 Convert Module (HKLM-x32\...\{BB8E1BCF-AE3B-44F4-A3B1-BFDEEDFE9D1D}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 Create Module (HKLM-x32\...\{35709A4D-0D4F-4CBD-BE15-4361885217A6}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 Edit Module (HKLM-x32\...\{E2318CE7-8F9A-48DD-B85B-BAAD3097CA6D}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 Forms Module (HKLM-x32\...\{1FA232C6-024E-4085-8A8D-8A065339EF75}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 Insert Module (HKLM-x32\...\{946BF77C-726A-4ABE-9490-585EF18BFBDC}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 OCR Module (HKLM-x32\...\{875294AB-A642-40AF-ABC9-87F8E6AD59BA}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 Review Module (HKLM-x32\...\{2D95BE46-24F6-4065-99AB-BDDB867DCE01}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 Secure Module (HKLM-x32\...\{AAE9B03F-9205-4C26-948F-10584D7D410D}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 View Module (HKLM-x32\...\{719A8CE6-9E05-4321-833C-E84FAD8B68DF}) (Version: 6.1.8.15098 - LULU Software Limited)

SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden

Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden

Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden

TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden

UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden

UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version:  - Tangysoft Ltd.)

VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)

WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden

Windows-Treiberpaket - ASUS (ATP) Mouse  (03/17/2014 1.0.0.207) (HKLM\...\AA2CC56D4BBEE037DC99871F5F6551133D2A0CC3) (Version: 03/17/2014 1.0.0.207 - ASUS)

WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-192083289-1371779681-2328390087-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
 

==================== Restore Points  =========================
 

17-04-2015 17:49:07 Geplanter Prüfpunkt

19-04-2015 19:00:07 Windows-Sicherung

20-04-2015 13:10:08 Installed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

20-04-2015 13:12:44 OpenOffice 4.0.1 wird installiert

20-04-2015 13:43:51 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {28198945-1BD0-412E-AF7F-89CE88D1E4EB} - System32\Tasks\chipSWU => Cscript.exe "C:\Program Files (x86)\chip\Internet Explorer\swu.vbs"

Task: {2D3A380B-865D-44CD-827A-6CA2CA80F448} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)

Task: {3395A489-0F48-4FDF-BFB4-AC808946233C} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {3E7485B7-4CC9-4259-8E69-62A7FA963BD8} - System32\Tasks\{C653AA2D-C29F-4BDB-9763-6D35C4490CC9} => pcalua.exe -a E:\WinFlash_Win8_64_VER2420\Setup.exe -d E:\WinFlash_Win8_64_VER2420

Task: {48515C69-566C-403E-8480-8D15322B2C4C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {5B830D2D-3A99-4BFB-88C7-17F82DEFC5D7} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {A256A3B7-D258-4E30-9188-0F602E094BAA} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {A82D695C-6B6D-4CD0-8553-9A180F45A47E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-01-20] (Piriform Ltd)

Task: {E0ED4FB4-3FC7-4A82-BC5F-46239128A5E4} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2014-03-31] (AsusTek)

Task: {E1242B1C-E9EF-4F7E-B202-BC983B6601F5} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {ED02416B-B0FB-4695-81B2-B60A76CFDEF6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2015-01-21 04:06 - 2015-01-21 04:06 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll

2015-02-20 05:42 - 2015-02-20 05:42 - 00382072 ____N () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll

2015-03-10 10:43 - 2014-06-04 11:21 - 00571904 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll

2015-03-10 10:43 - 2014-05-19 18:19 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll

2014-11-18 18:33 - 2014-11-18 18:33 - 00187512 _____ () C:\Program Files (x86)\chip\Internet Explorer\chip32.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-192083289-1371779681-2328390087-1000\Control Panel\Desktop\\Wallpaper -> 

DNS Servers: 192.168.192.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-192083289-1371779681-2328390087-500 - Administrator - Disabled)

Gast (S-1-5-21-192083289-1371779681-2328390087-501 - Limited - Disabled)

User (S-1-5-21-192083289-1371779681-2328390087-1000 - Administrator - Enabled) => C:\Users\User
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (04/20/2015 03:07:09 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (04/20/2015 03:07:03 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (04/20/2015 01:31:20 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/18/2015 09:52:48 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000

Name des fehlerhaften Moduls: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000001915

ID des fehlerhaften Prozesses: 0x1a70

Startzeit der fehlerhaften Anwendung: 0xvlc.exe0

Pfad der fehlerhaften Anwendung: vlc.exe1

Pfad des fehlerhaften Moduls: vlc.exe2

Berichtskennung: vlc.exe3
 

Error: (04/18/2015 07:58:58 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18798, Zeitstempel: 0x5507b864

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000004ad94

ID des fehlerhaften Prozesses: 0x790

Startzeit der fehlerhaften Anwendung: 0xvlc.exe0

Pfad der fehlerhaften Anwendung: vlc.exe1

Pfad des fehlerhaften Moduls: vlc.exe2

Berichtskennung: vlc.exe3
 

Error: (04/18/2015 01:47:23 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18798, Zeitstempel: 0x5507b864

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000004ad94

ID des fehlerhaften Prozesses: 0x1100

Startzeit der fehlerhaften Anwendung: 0xvlc.exe0

Pfad der fehlerhaften Anwendung: vlc.exe1

Pfad des fehlerhaften Moduls: vlc.exe2

Berichtskennung: vlc.exe3
 

Error: (04/15/2015 07:40:30 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/15/2015 05:21:57 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/15/2015 11:39:42 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/15/2015 11:10:36 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

System errors:

=============

Error: (04/20/2015 01:28:40 PM) (Source: DCOM) (EventID: 10005) (User: )

Description: 1053GDFwSvc-Service{1DED95CA-C567-464A-B405-087EDDF0B095}
 

Error: (04/20/2015 01:28:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "G Data Personal Firewall" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (04/20/2015 01:28:40 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst G Data Personal Firewall erreicht.
 

Error: (04/16/2015 07:02:28 AM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "SARAH",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{FD5A0591-1326-47CC-8AAE-1A4A2B551168}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (04/15/2015 01:59:12 PM) (Source: volsnap) (EventID: 36) (User: )

Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
 

Error: (04/15/2015 11:39:03 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Soda PDF 6 Creator" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (04/15/2015 11:39:03 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Soda PDF 6 Creator erreicht.
 

Error: (04/15/2015 10:59:05 AM) (Source: Disk) (EventID: 11) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.
 

Error: (04/15/2015 10:59:04 AM) (Source: Disk) (EventID: 11) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.
 

Error: (04/15/2015 10:59:04 AM) (Source: Disk) (EventID: 11) (User: )

Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.
 
 

Microsoft Office Sessions:

=========================

Error: (04/20/2015 03:07:09 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\Downloads\esetsmartinstaller_deu.exe
 

Error: (04/20/2015 03:07:03 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\Downloads\esetsmartinstaller_deu.exe
 

Error: (04/20/2015 01:31:20 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/18/2015 09:52:48 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: vlc.exe2.1.5.000000000vlc.exe2.1.5.000000000c000000500000000000019151a7001d07a01649ee32cC:\Program Files\VideoLAN\VLC\vlc.exeC:\Program Files\VideoLAN\VLC\vlc.exe7c7616c5-e604-11e4-9bb6-ac9e17d23840
 

Error: (04/18/2015 07:58:58 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: vlc.exe2.1.5.000000000ntdll.dll6.1.7601.187985507b864c0000005000000000004ad9479001d079f4630ca995C:\Program Files\VideoLAN\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dll957dde47-e5f4-11e4-9bb6-ac9e17d23840
 

Error: (04/18/2015 01:47:23 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: vlc.exe2.1.5.000000000ntdll.dll6.1.7601.187985507b864c0000005000000000004ad94110001d079cd3de22cf4C:\Program Files\VideoLAN\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dllacb9b61a-e5c0-11e4-9bb6-ac9e17d23840
 

Error: (04/15/2015 07:40:30 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/15/2015 05:21:57 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/15/2015 11:39:42 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/15/2015 11:10:36 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Pentium(R) CPU N3540 @ 2.16GHz

Percentage of memory in use: 35%

Total physical RAM: 8079.99 MB

Available physical RAM: 5245.63 MB

Total Pagefile: 16158.17 MB

Available Pagefile: 12649.45 MB

Total Virtual: 8192 MB

Available Virtual: 8191.84 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:698.54 GB) (Free:521.19 GB) NTFS

Drive d: (PCWELT_1_2014) (CDROM) (Total:1.72 GB) (Free:0 GB) CDFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: E06598BF)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=698.5 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Die Daten von der Quarantäne in mbam bekomme ich jetzt nicht exportiert, kann es an Internet Explorer liegen?

Danke für die Hilfe schon mal

hi,

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Code:

# AdwCleaner v4.201 - Bericht erstellt 20/04/2015 um 19:45:45

# Aktualisiert 08/04/2015 von Xplode

# Datenbank : 2015-04-19.4 [Server]

# Betriebssystem : Windows 7 Professional Service Pack 1 (x64)

# Benutzername : User - RWE-HOTTE

# Gestarted von : C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\14WBAMJ0\AdwCleaner_4.201.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Datei Gelöscht : C:\Users\Public\Desktop\YTD Video Downloader.lnk

Datei Gelöscht : C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\user.js
 

***** [ Geplante Tasks ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKCU\Software\Ciuvo

Schlüssel Gelöscht : HKCU\Software\Local AppWizard-Generated Applications

Schlüssel Gelöscht : HKLM\SOFTWARE\DigitalMore
 

***** [ Internetbrowser ] *****
 

-\\ Internet Explorer v11.0.9600.17728
 
 

-\\ Mozilla Firefox v37.0.1 (x86 de)
 
 

*************************
 

AdwCleaner[R0].txt - [1322 Bytes] - [20/04/2015 19:43:52]

AdwCleaner[S0].txt - [1113 Bytes] - [20/04/2015 19:45:45]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1172  Bytes] ##########

Nach dem Öffnen von Firefox kam von G Data die Warnmeldung:

Junkware (PUP): Script.Adware.DealPly.G (Engine B)

Junkware (PUP) beim Laden von Web-Inhalten gefunden.

Adresse: hxxp://i.sterisjs.info/steris/javascript.js?channel=4030029&apptitle=Digital%20More
Status: Der Zugriff wurde verweigert.

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.5.9 (04.19.2015:1)

OS: Windows 7 Professional x64

Ran by User on 20.04.2015 at 19:56:31,73

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Tasks
 
 
 

~~~ Registry Values
 

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{7553EA3C-F8DA-4188-B7BC-956894EA54F5}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{ACEC6276-3D7B-4AA9-BE79-23520A23026D}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7553EA3C-F8DA-4188-B7BC-956894EA54F5}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ACEC6276-3D7B-4AA9-BE79-23520A23026D}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{7553EA3C-F8DA-4188-B7BC-956894EA54F5}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{ACEC6276-3D7B-4AA9-BE79-23520A23026D}
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ FireFox
 

Emptied folder: C:\Users\User\AppData\Roaming\mozilla\firefox\profiles\ic500lzi.default\minidumps [2 files]
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 20.04.2015 at 19:59:58,13

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-04-2015

Ran by User (administrator) on RWE-HOTTE on 20-04-2015 20:05:22

Running from C:\Users\User\Desktop

Loaded Profiles: User (Available profiles: User)

Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: IE)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe

(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe

(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe

(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE

(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Microsoft Corporation) C:\Windows\System32\msiexec.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1855608 2015-02-20] (G DATA Software AG)

HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-11-28] (Geek Software GmbH)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2024800 2014-06-04] (Wondershare)

HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe,

HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)

HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31344744 2015-02-26] (Skype Technologies S.A.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-02-14]

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKU\S-1-5-21-192083289-1371779681-2328390087-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-192083289-1371779681-2328390087-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-192083289-1371779681-2328390087-1000 -> {8F17D790-19DE-42BC-914D-DF279FFCCEFB} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}

BHO: CHIP Best Deal BHO -> {7553EA3C-F8DA-4188-B7BC-956894EA54F5} -> C:\Program Files (x86)\chip\Internet Explorer\chip64.dll [2014-11-18] ()

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-02-23] (Oracle Corporation)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-02-23] (Oracle Corporation)

BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20] (Hewlett-Packard Co.)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)

BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20] (Hewlett-Packard Co.)

Toolbar: HKLM-x32 - Soda PDF 6 Toolbar - {35251526-B7A4-44E4-8B2E-FD62AE267B82} - C:\Program Files (x86)\Soda PDF 6\creator-ie-plugin.dll [2014-02-20] (LULU SOFTWARE LIMITED)

DPF: HKLM-x32 {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.com/select/asusTek_sys_ctrl3.cab

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.192.1
 

FireFox:

========

FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default

FF SelectedSearchEngine: Yahoo!

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()

FF Plugin: @java.com/DTPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-02-23] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-02-23] (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin-x32: Soda PDF 6 -> C:\Program Files (x86)\Soda PDF 6\np-previewer.dll [2014-02-20] (LULU SOFTWARE LIMITED)

FF Extension: CHIP Best Deal - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\Extensions\ciuvo-extension@chip.de.xpi [2015-03-18]

FF Extension: PAYBACK Internet Assistent fuer Firefox - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\Extensions\toolbar-ff@payback.de.xpi [2015-04-02]

FF Extension: Digital More - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ic500lzi.default\Extensions\{bc1f498e-2a46-489a-b4e8-54621ed44de5}.xpi [2015-04-20]

FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-04-08]

FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-02-14]

FF HKLM-x32\...\Firefox\Extensions: [soda_pdf_6_conv@sodapdf.com] - C:\Program Files (x86)\Soda PDF 6\resources\firefoxextension

FF Extension: Soda PDF 6 Creator - C:\Program Files (x86)\Soda PDF 6\resources\firefoxextension [2015-03-10]

FF HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider) [File not signed]

R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2528888 2015-04-16] (G Data Software AG)

R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [965240 2015-02-20] (G Data Software AG)

R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [3672560 2015-04-07] (G Data Software AG)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)

R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [3193080 2015-02-20] (G Data Software AG)

R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [789112 2015-03-04] (G Data Software AG)

R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]

R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed]

S2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89864 2014-12-11] (Hewlett-Packard Company)

S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-12] (Intel Corporation)

S3 LULU Software CrashHandler; C:\Program Files (x86)\Soda PDF 6\crash-handler-ws.exe [744800 2014-02-20] (LULU SOFTWARE LIMITED)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]

S3 Soda PDF 6; C:\Program Files (x86)\Soda PDF 6\ws.exe [1573728 2014-02-20] (LULU SOFTWARE LIMITED)

S2 Soda PDF 6 Creator; C:\Program Files (x86)\Soda PDF 6\creator-ws.exe [620384 2014-02-20] (LULU SOFTWARE LIMITED)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

S2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-02-25] (Atheros) [File not signed]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R3 ATP; C:\Windows\System32\DRIVERS\AsusTP.sys [71952 2014-03-31] (ASUS Corporation)

R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [150016 2015-04-15] (G Data Software AG)

R3 GDKBB; C:\Windows\system32\drivers\GDKBB64.sys [27648 2015-04-15] (G Data Software AG)

R1 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [20992 2015-04-15] (G Data Software AG)

R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [230400 2015-04-15] (G Data Software AG)

R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [75776 2015-04-15] (G Data Software AG)

R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64512 2015-04-20] (G Data Software AG)

R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2015-02-16] (G Data Software)

R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [124928 2015-04-15] (G Data Software AG)

R3 TXEIx64; C:\Windows\System32\DRIVERS\TXEIx64.sys [88592 2014-02-17] (Intel Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-04-20 20:05 - 2015-04-20 20:05 - 00014061 _____ () C:\Users\User\Desktop\FRST.txt

2015-04-20 20:04 - 2015-04-20 20:04 - 02099712 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe

2015-04-20 19:59 - 2015-04-20 19:59 - 00001771 _____ () C:\Users\User\Desktop\JRT.txt

2015-04-20 19:56 - 2015-04-20 19:56 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-RWE-HOTTE-Windows-7-Professional-(64-bit).dat

2015-04-20 19:56 - 2015-04-20 19:56 - 00000000 ____D () C:\RegBackup

2015-04-20 19:53 - 2015-04-20 19:53 - 02684539 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe

2015-04-20 19:46 - 2015-04-20 19:46 - 00000354 _____ () C:\Windows\PFRO.log

2015-04-20 19:46 - 2015-04-20 19:46 - 00000056 _____ () C:\Windows\setupact.log

2015-04-20 19:46 - 2015-04-20 19:46 - 00000000 _____ () C:\Windows\setuperr.log

2015-04-20 19:43 - 2015-04-20 19:45 - 00000000 ____D () C:\AdwCleaner

2015-04-20 17:59 - 2015-04-20 20:05 - 00000000 ____D () C:\FRST

2015-04-20 17:49 - 2015-04-20 17:49 - 00000377 _____ () C:\Users\User\Desktop\eset online scanner.txt

2015-04-20 15:07 - 2015-04-20 15:07 - 00000000 ____D () C:\Program Files (x86)\ESET

2015-04-20 15:06 - 2015-04-20 15:06 - 02347384 _____ (ESET) C:\Users\User\Downloads\esetsmartinstaller_deu.exe

2015-04-20 13:50 - 2015-04-20 13:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA INTERNET SECURITY

2015-04-20 13:49 - 2015-04-20 13:49 - 00002058 _____ () C:\Windows\DPINST.LOG

2015-04-20 13:15 - 2015-04-20 13:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\OpenOffice

2015-04-20 13:14 - 2015-04-20 13:14 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk

2015-04-20 13:14 - 2015-04-20 13:14 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1

2015-04-20 13:13 - 2015-04-20 13:13 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4

2015-04-20 13:09 - 2015-04-20 13:10 - 00000000 ____D () C:\Users\User\Desktop\OpenOffice 4.0.1 (de) Installation Files

2015-04-20 13:00 - 2015-04-20 13:00 - 00001179 _____ () C:\Users\User\Desktop\Die Installation von ODF Add-in für Microsoft Office 4.0 fortsetzen.lnk

2015-04-20 12:58 - 2015-04-20 12:58 - 04911297 _____ () C:\Users\User\Downloads\OdfAddInForOfficeSetup-de_4.0.5309 [1].exe

2015-04-20 12:57 - 2015-04-20 12:58 - 00766640 _____ (Prog ) C:\Users\User\Downloads\OdfAddInForOfficeSetup-de_4.0.5309.exe

2015-04-20 12:51 - 2015-04-20 12:52 - 00064834 _____ () C:\Users\User\Desktop\DP Mai-1.odt

2015-04-15 11:28 - 2015-04-15 11:28 - 00381727 _____ () C:\Users\User\Downloads\Winflash_Win81_64_VER2420.zip

2015-04-15 11:23 - 2015-04-15 11:23 - 00357797 _____ () C:\Users\User\Downloads\Winflash_WIN7_32_64_z2301.zip

2015-04-15 11:08 - 2015-04-15 11:08 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-04-15 11:08 - 2015-04-15 11:08 - 00000000 ____D () C:\Windows\system32\appraiser

2015-04-15 10:58 - 2013-08-01 11:33 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll

2015-04-15 10:56 - 2015-04-15 10:57 - 06401659 _____ () C:\Users\User\Downloads\Chipset_Intel_Win7_64_VER9441006.zip

2015-04-15 10:52 - 2015-04-15 10:52 - 00381727 _____ () C:\Users\User\Downloads\WinFlash_Win7_32_VER2420.zip

2015-04-15 10:50 - 2015-04-15 10:50 - 00000000 ____D () C:\Users\User\Downloads\WinFlash_Win7_64_VER301(1)

2015-04-15 10:49 - 2015-04-15 10:49 - 00909962 _____ () C:\Users\User\Downloads\WinFlash_Win7_64_VER301(1).zip

2015-04-15 10:48 - 2015-04-15 10:48 - 00909962 _____ () C:\Users\User\Downloads\WinFlash_Win7_64_VER301.zip

2015-04-15 10:45 - 2015-04-15 10:45 - 00003130 _____ () C:\Windows\System32\Tasks\{C653AA2D-C29F-4BDB-9763-6D35C4490CC9}

2015-04-15 10:38 - 2015-04-15 10:38 - 00027648 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBB64.sys

2015-04-15 10:38 - 2015-04-15 10:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_GDKBB64_01007.Wdf

2015-04-15 10:23 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-04-15 10:23 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-04-15 10:23 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-04-15 10:23 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-04-15 10:23 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-04-15 10:23 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-04-15 10:23 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-04-15 10:23 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-04-15 10:23 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-04-15 10:23 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-04-15 10:23 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-04-15 10:23 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-04-15 10:23 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-04-15 10:23 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-04-15 10:23 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-04-15 10:23 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-04-15 10:23 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-04-15 10:23 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-04-15 10:23 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-04-15 10:23 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-04-15 10:23 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-04-15 10:23 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2015-04-15 10:23 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2015-04-15 10:23 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-04-15 10:23 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-04-15 10:23 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2015-04-15 10:23 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2015-04-15 10:23 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-04-15 10:23 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-04-15 10:23 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-04-15 10:23 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-04-15 10:23 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-04-15 10:23 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2015-04-15 10:23 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2015-04-15 10:23 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2015-04-15 10:23 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-04-15 10:23 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-04-15 10:23 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2015-04-15 10:23 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-04-15 10:23 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2015-04-15 10:23 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-04-15 10:23 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2015-04-15 10:23 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2015-04-15 10:23 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2015-04-15 10:23 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-04-15 10:23 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-04-15 10:23 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-04-15 10:23 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-04-15 10:23 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-04-15 10:23 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-04-15 10:23 - 2015-01-28 01:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2015-04-15 10:22 - 2015-04-02 02:17 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-04-15 10:22 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-04-15 10:22 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-04-15 10:22 - 2015-03-13 06:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-04-15 10:22 - 2015-03-13 06:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-04-15 10:22 - 2015-03-13 06:09 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-04-15 10:22 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-04-15 10:22 - 2015-03-13 06:08 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-04-15 10:22 - 2015-03-13 06:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-04-15 10:22 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-04-15 10:22 - 2015-03-13 06:06 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-04-15 10:22 - 2015-03-13 06:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-04-15 10:22 - 2015-03-13 05:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-04-15 10:22 - 2015-03-13 05:55 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-04-15 10:22 - 2015-03-13 05:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-04-15 10:22 - 2015-03-13 05:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-04-15 10:22 - 2015-03-13 05:53 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-04-15 10:22 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-04-15 10:22 - 2015-03-13 05:44 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-04-15 10:22 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-04-15 10:22 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-04-15 10:22 - 2015-03-13 05:40 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-04-15 10:22 - 2015-03-13 05:32 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-04-15 10:22 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-04-15 10:22 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-04-15 10:22 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-04-15 10:22 - 2015-03-13 05:27 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-04-15 10:22 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-04-15 10:22 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-04-15 10:22 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-04-15 10:22 - 2015-03-13 05:23 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-04-15 10:22 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-04-15 10:22 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-04-15 10:22 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-04-15 10:22 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-04-15 10:22 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-04-15 10:22 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-04-15 10:22 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-04-15 10:22 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-04-15 10:22 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-04-15 10:22 - 2015-03-13 05:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-04-15 10:22 - 2015-03-13 05:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-04-15 10:22 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-04-15 10:22 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-04-15 10:22 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-04-15 10:22 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-04-15 10:22 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-04-15 10:22 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-04-15 10:22 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-04-15 10:22 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-04-15 10:22 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-04-15 10:22 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-04-15 10:22 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-04-15 10:22 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-04-15 10:22 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-04-15 10:22 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-04-15 10:22 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-04-15 10:22 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-04-15 10:22 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2015-04-15 10:22 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll

2015-04-15 10:22 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll

2015-04-15 10:22 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys

2015-04-15 10:11 - 2015-04-15 10:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in

2015-04-08 22:46 - 2015-04-08 22:52 - 581496318 _____ () C:\Users\User\Downloads\Illuminati_2015-04-06_2015_122688.mp4

2015-04-08 22:45 - 2015-04-08 22:51 - 491444971 _____ () C:\Users\User\Downloads\Die_Comedy_Couch_mit_Kim_Fisher_2015-04-07_0220_122688.mp4

2015-04-08 22:17 - 2015-04-08 22:35 - 425881968 _____ () C:\Users\User\Downloads\Ohne_Ausweg_2015-04-06_0345_122688.mp4

2015-04-08 22:16 - 2015-04-08 22:45 - 761037373 _____ () C:\Users\User\Downloads\Die_Schlager_des_Jahres_2014_2015-04-06_0845_122688.mp4

2015-04-08 22:16 - 2015-04-08 22:24 - 140148029 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-04-05_2345_122688.mp4

2015-04-08 22:15 - 2015-04-08 22:36 - 556524950 _____ () C:\Users\User\Downloads\Das_goldene_Ufer_2015-04-06_0255_122688.mp4

2015-04-08 22:15 - 2015-04-08 22:34 - 390949119 _____ () C:\Users\User\Downloads\Steven_Seagal_Kill_Switch_2015-04-06_0220_122688.mp4

2015-04-08 22:14 - 2015-04-08 22:40 - 930313604 _____ () C:\Users\User\Downloads\Rosamunde_Pilcher_Ein_einziger_Kuss_2015-04-06_2015_122688.mp4

2015-04-08 22:14 - 2015-04-08 22:35 - 204528270 _____ () C:\Users\User\Downloads\Der_Koenig_von_Mallorca_Das_Phaenomen_Jue_2015-04-06_2210_122688.mp4

2015-04-08 22:14 - 2015-04-08 22:34 - 419401949 _____ () C:\Users\User\Downloads\Alarmstufe_Rot_2_2015-04-07_0045_122688.mp4

2015-04-08 22:14 - 2015-04-08 22:33 - 424242424 _____ () C:\Users\User\Downloads\G_I_Joe_Die_Abrechnung_2015-04-06_2015_122688.mp4

2015-04-08 22:13 - 2015-04-08 22:36 - 574859351 _____ () C:\Users\User\Downloads\Belle_de_Jour_Schoene_des_Tages_2015-04-07_2350_122688.mp4

2015-04-08 22:13 - 2015-04-08 22:34 - 465449132 _____ () C:\Users\User\Downloads\Depression_Eine_Krankheit_erobert_die__2015-04-08_0245_122688.mp4

2015-04-08 22:13 - 2015-04-08 22:17 - 145707400 _____ () C:\Users\User\Downloads\Das_Beste_aus_Verstehen_Sie_Spass__2015-04-08_0415_122688.mp4

2015-04-08 17:32 - 2015-04-08 17:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2015-04-07 06:58 - 2015-04-07 06:58 - 00000000 ___SD () C:\Windows\SysWOW64\GWX

2015-04-07 06:58 - 2015-04-07 06:58 - 00000000 ___SD () C:\Windows\system32\GWX

2015-04-06 15:09 - 2015-01-29 03:18 - 906833541 _____ () C:\Users\User\Desktop\96 hours Taken 3.mkv

2015-04-06 15:04 - 2015-04-07 14:06 - 00000000 ____D () C:\Users\User\Documents\Peter

2015-04-06 14:32 - 2015-04-06 14:39 - 585113309 _____ () C:\Users\User\Downloads\The_Da_Vinci_Code_Sakrileg_2015-04-04_2215_122688.mp4

2015-04-06 14:29 - 2015-04-06 14:33 - 193020536 _____ () C:\Users\User\Downloads\Sportschau_2015-04-05_1845_122688.mp4

2015-04-06 14:26 - 2015-04-06 14:32 - 323286126 _____ () C:\Users\User\Downloads\Wacken_2013_Anthrax_Live_Musik_vom_Wacken_Festival_2015-04-05_0405_122688.mp4

2015-04-06 14:25 - 2015-04-06 14:32 - 323349234 _____ () C:\Users\User\Downloads\Wacken_2013_Alice_Cooper_und_Motoerhead_Live_Musik_vo_2015-04-04_2110_122688.mp4

2015-04-06 14:23 - 2015-04-06 14:35 - 723666773 _____ () C:\Users\User\Downloads\Das_Beste_aus_30_Jahren_Verstehen_Sie_S_2015-04-04_2015_122688.mp4

2015-04-06 14:23 - 2015-04-06 14:32 - 482955102 _____ () C:\Users\User\Downloads\Bella_Block_Die_schoenste_Nacht_des_Lebens_2015-04-04_2015_122688.mp4

2015-04-06 14:21 - 2015-04-06 14:27 - 496576732 _____ () C:\Users\User\Downloads\das_aktuelle_sportstudio_2015-04-04_2300_122688.mp4

2015-04-05 18:49 - 2015-04-05 18:49 - 00000000 ____D () C:\Users\User\Desktop\Uploader.Presents-Non.Stop.TS.MD.German.x264.READ

2015-04-04 15:48 - 2015-04-04 15:52 - 334543890 _____ () C:\Users\User\Downloads\Brain_Games_Teste_Dein_Gehirn_6__2015-04-03_2015_122688.mp4

2015-04-04 15:48 - 2015-04-04 15:52 - 274013340 _____ () C:\Users\User\Downloads\zdf_bauhaus_Tim_Bendzko_2015-04-04_0415_122688.mp4

2015-04-04 15:48 - 2015-04-04 15:48 - 496843927 _____ () C:\Users\User\Downloads\Geheimnis_im_blauen_Schloss_2015-04-04_0255_122688.mp4

2015-04-04 15:48 - 2015-04-04 15:48 - 489822247 _____ () C:\Users\User\Downloads\Der_Pfarrer_und_das_Maedchen_2015-04-03_2115_122688.mp4

2015-04-04 14:19 - 2015-04-04 14:33 - 499372189 _____ () C:\Users\User\Downloads\Die_Alpen_Unsere_Berge_von_oben_2015-04-03_2015_122688.mp4

2015-04-04 14:18 - 2015-04-04 14:34 - 379646136 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-03-27_2200_122688.mp4

2015-04-04 14:17 - 2015-04-04 14:34 - 710178099 _____ () C:\Users\User\Downloads\Papillon_2015-03-26_0155_122688.mp4

2015-04-04 14:17 - 2015-04-04 14:29 - 426540402 _____ () C:\Users\User\Downloads\Utta_Danella_Lisa_schwimmt_sich_frei_2015-03-27_2015_122688.mp4

2015-04-04 13:55 - 2015-04-04 14:15 - 923278063 _____ () C:\Users\User\Downloads\Echo_2015_Der_deutsche_Musikpreis_2015-03-26_2015_122688.mp4

2015-04-04 13:53 - 2015-04-04 14:10 - 467415232 _____ () C:\Users\User\Downloads\Road_Trip_2_Die_Biermeister_2015-03-29_0355_122688.mp4

2015-04-04 13:52 - 2015-04-04 14:10 - 387451172 _____ () C:\Users\User\Downloads\Unverschaemtes_Glueck_2015-03-25_2015_122688.mp4

2015-04-04 13:51 - 2015-04-04 14:11 - 553643365 _____ () C:\Users\User\Downloads\Eat_Pray_Love_2015-03-25_2015_122688.mp4

2015-04-04 13:51 - 2015-04-04 14:06 - 394090467 _____ () C:\Users\User\Downloads\Alleine_war_gestern_2015-03-24_1830_122688.mp4

2015-04-04 13:50 - 2015-04-04 14:10 - 554833981 _____ () C:\Users\User\Downloads\Lady_Chatterley_2015-03-25_0105_122688.mp4

2015-04-04 13:50 - 2015-04-04 14:05 - 351144329 _____ () C:\Users\User\Downloads\Walking_Tall_Auf_eigene_Faust_2015-04-02_2205_122688.mp4

2015-04-04 13:49 - 2015-04-04 14:13 - 828554760 _____ () C:\Users\User\Downloads\Willkommen_bei_Carmen_Nebel_Stars_Musik_und_Ueberraschungen_aus_Hann_2015-04-02_2015_122688.mp4

2015-04-04 13:49 - 2015-04-04 14:11 - 596105607 _____ () C:\Users\User\Downloads\Rossini_Oder_die_moerderische_Frage_we_2015-04-02_2300_122688.mp4

2015-04-04 13:49 - 2015-04-04 14:08 - 473257040 _____ () C:\Users\User\Downloads\Tatort_Verdammt_2015-04-02_2015_122688.mp4

2015-04-03 19:42 - 2015-04-03 19:47 - 145286478 _____ () C:\Users\User\Downloads\Sportclub_Stars_Martin_Schwalb_2015-03-22_2345_122688.mp4

2015-04-03 19:41 - 2015-04-03 19:52 - 537408889 _____ () C:\Users\User\Downloads\Opa_wird_verkauft_2015-03-21_2015_122688.mp4

2015-04-03 19:41 - 2015-04-03 19:48 - 291670270 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-03-18_2345_122688.mp4

2015-04-03 19:37 - 2015-04-03 19:47 - 458530158 _____ () C:\Users\User\Downloads\The_Team_Folge3_2015-03-22_2200_122688.mp4

2015-04-03 19:37 - 2015-04-03 19:45 - 365816657 _____ () C:\Users\User\Downloads\Marie_Brand_und_der_schoene_Schein_2015-03-14_2015_122688.mp4

2015-04-03 19:36 - 2015-04-03 19:47 - 475388247 _____ () C:\Users\User\Downloads\Schmetterling_und_Taucherglocke_2015-03-12_2225_122688.mp4

2015-04-03 19:20 - 2015-04-03 19:26 - 159506669 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-22_2345_122688.mp4

2015-04-03 19:19 - 2015-04-03 19:30 - 475158512 _____ () C:\Users\User\Downloads\The_Team_Folge2_2015-03-15_2200_122688.mp4

2015-04-03 19:19 - 2015-04-03 19:25 - 117573359 _____ () C:\Users\User\Downloads\Kalabrien_Italiens_vergessene_Region_2015-03-23_0410_122688.mp4

2015-04-03 19:17 - 2015-04-03 19:28 - 327330406 _____ () C:\Users\User\Downloads\Opa_ledig_jung_2015-03-13_2015_122688.mp4

2015-04-03 19:17 - 2015-04-03 19:25 - 229733322 _____ () C:\Users\User\Downloads\WISO_2015-03-10_0255_122688.mp4

2015-04-03 19:16 - 2015-04-03 19:30 - 454030000 _____ () C:\Users\User\Downloads\Wanderlust_Der_Trockenmauerweg_Mallorca_Der_Steve_2015-03-15_2015_122688.mp4

2015-04-03 19:16 - 2015-04-03 19:30 - 430891971 _____ () C:\Users\User\Downloads\Wunderschoen_Die_Vulkaninseln_Siziliens_Urlaub_auf__2015-03-15_2015_122688.mp4

2015-04-03 19:16 - 2015-04-03 19:28 - 358713981 _____ () C:\Users\User\Downloads\Das_haelt_kein_Jahr__2015-03-15_2015_122688.mp4

2015-04-03 19:15 - 2015-04-03 19:19 - 132355849 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-08_2345_122688.mp4

2015-04-03 14:25 - 2015-04-03 14:30 - 431214813 _____ () C:\Users\User\Downloads\Wunderschoen_Die_Algarve_Portugals_sonniger_Sueden_2015-03-15_1415_122688.mp4

2015-04-03 14:24 - 2015-04-03 14:26 - 129831763 _____ () C:\Users\User\Downloads\ZDFzoom_Die_Dortmund_Story_2015-03-18_2315_122688.mp4

2015-04-03 13:49 - 2015-04-03 13:58 - 423648302 _____ () C:\Users\User\Downloads\Love_Happens_2015-03-11_2015_122688.mp4

2015-04-03 13:48 - 2015-04-03 13:58 - 535812526 _____ () C:\Users\User\Downloads\The_Voice_Kids_2015-03-13_2015_122688.mp4

2015-04-03 13:48 - 2015-04-03 13:50 - 79013784 _____ () C:\Users\User\Downloads\Hollands_sonniger_Sueden_Ferien_an_der_Nordseekueste_von_Zeeland_2015-03-09_0445_122688.mp4

2015-04-03 13:46 - 2015-04-03 13:58 - 567107616 _____ () C:\Users\User\Downloads\The_Voice_Kids_2015-03-27_2015_122688.mp4

2015-04-03 13:45 - 2015-04-03 13:55 - 422966784 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-04-02_2325_122688.mp4

2015-04-03 13:43 - 2015-04-03 13:51 - 475543075 _____ () C:\Users\User\Downloads\Tatort_Happy_Birthday_Sarah_2015-03-31_2015_122688.mp4

2015-04-03 13:43 - 2015-04-03 13:47 - 393050126 _____ () C:\Users\User\Downloads\Tatort_Spiel_auf_Zeit_2015-03-27_2200_122688.mp4

2015-03-31 21:23 - 2015-04-01 23:26 - 00634880 _____ () C:\Users\User\Desktop\Stundenerhebung März 2015.xls

2015-03-29 20:35 - 2015-03-29 22:22 - 00000000 ____D () C:\Users\User\Desktop\Beratungsgespräche

2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2015-03-29 12:22 - 2015-03-29 12:22 - 13087456 _____ (Microsoft Corporation) C:\Users\User\Downloads\Silverlight_x64.exe

2015-03-27 16:08 - 2015-03-27 16:09 - 00000000 ____D () C:\Users\User\Desktop\Microsoft Office Professional 2003 SP3 Deutsch Ger

2015-03-27 16:02 - 2015-03-27 16:02 - 00000000 ____D () C:\Users\User\Documents\Drucken

2015-03-27 16:02 - 2013-06-06 15:53 - 00565760 _____ () C:\Users\User\Documents\Stundenerhebung Juni 2013.xls

2015-03-27 16:02 - 2013-05-23 00:10 - 00038400 _____ () C:\Users\User\Documents\Verkauf.xls

2015-03-27 16:02 - 2011-01-12 14:15 - 283741092 _____ () C:\Users\User\Documents\Thyssen Krupp Film von SMS .avi

2015-03-27 16:01 - 2011-01-12 13:58 - 269262848 _____ () C:\Users\User\Documents\CAP0199_DE.576p25.mpeg-1.mpg

2015-03-26 14:33 - 2015-03-26 14:34 - 00000000 ____D () C:\Users\User\Documents\Saison Übersicht Gladbach

2015-03-26 14:29 - 2015-03-26 14:33 - 00000000 ____D () C:\Users\User\Documents\AK Fussball Spieler ABC

2015-03-25 16:14 - 2015-03-25 16:17 - 207146482 _____ () C:\Users\User\Downloads\Marius_Mueller_Westernhagen_Live_in_Base_2015-02-28_2015_122688.mp4

2015-03-25 16:13 - 2015-03-25 16:18 - 422494491 _____ () C:\Users\User\Downloads\Die_Rosel_vom_Schwarzwald_2015-02-28_2015_122688.mp4

2015-03-25 15:48 - 2015-03-25 15:52 - 541919016 _____ () C:\Users\User\Downloads\Die_Dolmetscherin_2015-02-28_2015_122688.mp4

2015-03-25 15:47 - 2015-03-25 15:50 - 289777406 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-02-25_2345_122688.mp4

2015-03-25 15:47 - 2015-03-25 15:49 - 116264599 _____ () C:\Users\User\Downloads\ZDFzoom_Vorsicht_Kreditfalle_Wie_Kunden_abgezoc_2015-02-25_2315_122688.mp4

2015-03-25 15:11 - 2015-03-25 15:28 - 407051367 _____ () C:\Users\User\Downloads\Das_Ende_einer_Affaere_2015-02-24_2200_122688.mp4

2015-03-25 15:11 - 2015-03-25 15:18 - 192852896 _____ () C:\Users\User\Downloads\X_Factor_Das_Unfassbare_Der_Kartengeber_Trinkgeld_Der_Baecker_Folge26_2015-02-28_0700_122688.mp4

2015-03-25 15:11 - 2015-03-25 15:17 - 129795686 _____ () C:\Users\User\Downloads\Die_Joerg_Knoer_Show_Sketche_und_Parodien_um_Prominente_2015-02-23_2245_122688.mp4

2015-03-25 15:10 - 2015-03-25 15:27 - 403718741 _____ () C:\Users\User\Downloads\In_einer_heissen_Nacht_2015-03-02_0040_122688.mp4

2015-03-25 15:09 - 2015-03-25 15:29 - 480413168 _____ () C:\Users\User\Downloads\The_Team_Folge1_2015-03-08_2200_122688.mp4

2015-03-25 15:09 - 2015-03-25 15:18 - 154281116 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-02_0340_122688.mp4

2015-03-25 15:06 - 2015-03-25 15:21 - 396215436 _____ () C:\Users\User\Downloads\Blauwasserleben_2015-03-15_2015_122688.mp4

2015-03-25 15:06 - 2015-03-25 15:20 - 404006823 _____ () C:\Users\User\Downloads\Polizeiruf_110_Tod_im_Kraftwerk_2015-03-10_2250_122688.mp4

2015-03-25 15:06 - 2015-03-25 15:17 - 440482775 _____ () C:\Users\User\Downloads\Liebling_wir_haben_geerbt__2015-02-25_0905_122688.mp4

2015-03-25 10:01 - 2015-03-25 10:04 - 368467353 _____ () C:\Users\User\Downloads\Tatort_Das_Muli_2015-03-22_2015_122688.mp4

2015-03-22 19:02 - 2015-03-22 19:03 - 00001249 _____ () C:\DelFix.txt

2015-03-22 19:02 - 2015-03-22 19:02 - 00000000 ____D () C:\Windows\ERUNT

2015-03-21 22:23 - 2015-03-21 22:34 - 468156595 _____ () C:\Users\User\Downloads\Die_Seelen_im_Feuer_2015-03-02_2015_122688.mp4

2015-03-21 22:20 - 2015-03-21 22:33 - 513609719 _____ () C:\Users\User\Downloads\The_Voice_Kids_2015-03-06_2015_122688.mp4

2015-03-21 22:20 - 2015-03-21 22:33 - 416634458 _____ () C:\Users\User\Downloads\Vier_kriegen_ein_Kind_2015-03-06_2015_122688.mp4

2015-03-21 22:19 - 2015-03-21 22:31 - 510220360 _____ () C:\Users\User\Downloads\Das_letzte_Schweigen_2015-02-21_0220_122688.mp4

2015-03-21 22:18 - 2015-03-21 22:30 - 352586102 _____ () C:\Users\User\Downloads\Der_Kotzbrocken_2015-02-20_2015_122688.mp4

2015-03-21 22:18 - 2015-03-21 22:23 - 250116989 _____ () C:\Users\User\Downloads\Der_Staatsanwalt_Toedlicher_Ehrgeiz_2015-02-20_2015_122688.mp4

2015-03-21 22:18 - 2015-03-21 22:22 - 165304595 _____ () C:\Users\User\Downloads\Die_Komiker_Bairisch_Comedy_100_Folge_Die_Komike_2015-02-20_2215_122688.mp4

2015-03-21 22:13 - 2015-03-21 22:16 - 321761282 _____ () C:\Users\User\Downloads\Tatort_Das_Haus_am_Ende_der_Strasse_2015-02-22_2015_122688.mp4

2015-03-21 22:09 - 2015-03-21 22:15 - 403602185 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-02-22_0935_122688.mp4

2015-03-21 22:08 - 2015-03-21 22:14 - 378015492 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-03-20_2145_122688.mp4

2015-03-21 22:08 - 2015-03-21 22:14 - 348373873 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-02-27_2145_122688.mp4

2015-03-21 22:08 - 2015-03-21 22:14 - 345261336 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-03-13_2145_122688.mp4
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-04-20 19:55 - 2009-07-14 06:45 - 00021680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-04-20 19:55 - 2009-07-14 06:45 - 00021680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-04-20 19:54 - 2011-04-12 09:43 - 00698926 _____ () C:\Windows\system32\perfh007.dat

2015-04-20 19:54 - 2011-04-12 09:43 - 00149034 _____ () C:\Windows\system32\perfc007.dat

2015-04-20 19:54 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-04-20 19:52 - 2015-01-08 12:03 - 01350565 _____ () C:\Windows\WindowsUpdate.log

2015-04-20 19:47 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-04-20 19:42 - 2015-02-14 13:24 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-04-20 16:21 - 2015-03-18 21:14 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-04-20 13:49 - 2015-02-13 17:16 - 00064512 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys

2015-04-20 13:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared

2015-04-20 13:35 - 2015-02-16 08:20 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps

2015-04-20 13:29 - 2009-07-14 06:45 - 00441024 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-04-20 13:08 - 2015-02-24 16:29 - 00000000 ____D () C:\Users\User\Documents\Autogrammadresse, Listen, Briefe

2015-04-20 12:46 - 2015-03-13 08:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype

2015-04-20 10:31 - 2015-02-19 18:01 - 00000000 ____D () C:\Users\User\Desktop\Sarah

2015-04-18 21:52 - 2015-02-14 13:33 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc

2015-04-18 18:26 - 2015-02-14 16:14 - 00000000 ____D () C:\Users\User\AppData\Roaming\UseNeXT

2015-04-18 18:23 - 2015-03-12 08:18 - 00000000 ____D () C:\Users\User\Documents\UseNeXT

2015-04-17 17:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

2015-04-17 17:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat

2015-04-17 10:38 - 2015-02-26 15:42 - 00000000 ____D () C:\Users\User\Documents\Eigene Scans

2015-04-15 21:32 - 2015-02-25 12:05 - 00000000 ____D () C:\Users\User\Documents\Abrechnungen Honorardozent

2015-04-15 11:06 - 2015-01-08 14:08 - 01592784 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2015-04-15 11:03 - 2015-02-13 18:29 - 00000000 ____D () C:\Windows\system32\MRT

2015-04-15 10:59 - 2015-02-13 18:29 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-04-15 10:58 - 2015-02-09 23:07 - 00000000 ____D () C:\Program Files (x86)\Intel

2015-04-15 10:40 - 2015-02-13 17:17 - 00075776 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys

2015-04-15 10:38 - 2015-02-13 17:16 - 00020992 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBFlt64.sys

2015-04-15 10:37 - 2015-02-13 17:16 - 00230400 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys

2015-04-15 10:37 - 2015-02-13 17:16 - 00150016 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys

2015-04-15 10:37 - 2015-02-13 17:16 - 00124928 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys

2015-04-15 10:16 - 2015-02-14 13:24 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-04-15 10:16 - 2015-02-14 13:24 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-04-15 10:16 - 2015-02-14 13:24 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-04-15 10:11 - 2015-01-08 14:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office

2015-04-15 10:01 - 2015-01-08 13:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2015-04-09 19:35 - 2015-03-05 17:09 - 00000000 ____D () C:\Users\User\Desktop\Karina

2015-04-07 21:17 - 2015-02-17 22:29 - 00000000 ____D () C:\Users\User\Desktop\Qualitätshandbuch neu

2015-04-07 17:18 - 2015-02-20 19:37 - 00049152 _____ () C:\Users\User\Desktop\Autogrammanforderung 2014.xls

2015-04-04 14:07 - 2015-03-19 17:04 - 00000000 ____D () C:\Users\User\Downloads\Save TV

2015-03-22 19:05 - 2015-03-18 22:02 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2015-03-22 18:58 - 2015-03-18 22:18 - 00000000 ____D () C:\Windows\erdnt
 

==================== Files in the root of some directories =======
 

2015-02-13 17:16 - 2015-02-13 17:16 - 0000000 _____ () C:\Users\User\AppData\Roaming\gdfw.log

2015-02-13 17:16 - 2015-02-13 17:16 - 0000779 _____ () C:\Users\User\AppData\Roaming\gdscan.log

2015-02-14 13:57 - 2015-03-03 23:49 - 0001324 _____ () C:\ProgramData\hpzinstall.log
 

Some content of TEMP:

====================

C:\Users\User\AppData\Local\Temp\ICReinstall_OdfAddInForOfficeSetup-de_4.0.5309.exe

C:\Users\User\AppData\Local\Temp\Quarantine.exe

C:\Users\User\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-04-17 17:42
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-04-2015

Ran by User at 2015-04-20 20:06:20

Running from C:\Users\User\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: G DATA INTERNET SECURITY (Disabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}

AS: G DATA INTERNET SECURITY (Disabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: G*DATA Personal Firewall (Disabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden

Adobe Flash Player 10 ActiveX (HKLM-x32\...\{B7B3E9B3-FB14-4927-894B-E9124509AF5A}) (Version: 10.0.32.18 - Adobe Systems, Inc.)

Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)

Anti-Twin (Installation 20.02.2015) (HKLM-x32\...\Anti-Twin 2015-02-20 20.44.25) (Version:  - Joerg Rosenthal, Germany)

ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.14 - ASUS)

BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden

CCleaner (HKLM\...\CCleaner) (Version: 5.02 - Piriform)

CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5306 - CDBurnerXP)

CHIP Best Deal (HKLM-x32\...\{7553EA3C-F8DA-4188-B7BC-956894EA54F5}) (Version: 1.4.21 - Ciuvo GmbH)

Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden

Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden

DJ_AIO_03_F4200_Software_Min (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden

ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.0.20150211 - Landesfinanzdirektion Thüringen)

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )

F4200 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden

G DATA INTERNET SECURITY (HKLM-x32\...\{AC68D2FF-1674-4C16-A536-A69FC11BBD82}) (Version: 25.1.0.4 - G DATA Software AG)

GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden

HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)

HP Deskjet F4200 All-In-One Driver Software 13.0 Rel. 3 (HKLM\...\{A00C9114-40E6-4C70-A619-7DF264B23485}) (Version: 13.0 - HP)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)

HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Support Solutions Framework (HKLM-x32\...\{E35601C0-BA8E-4F32-919A-C7EF4CA81F67}) (Version: 11.51.0048 - Hewlett-Packard Company)

HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)

HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden

HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden

HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden

HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden

HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden

HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)

Java 7 Update 75 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417075FF}) (Version: 7.0.750 - Oracle)

Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden

Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)

Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.1.1 - Mozilla)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)

PDF24 Creator 6.9.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)

Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.318 - Qualcomm Atheros Communications)

Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.27040 - Realtek Semiconductor Corp.)

Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)

Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)

Skype™ 7.2 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.2.103 - Skype Technologies S.A.)

SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden

Soda PDF 6 Convert Module (HKLM-x32\...\{BB8E1BCF-AE3B-44F4-A3B1-BFDEEDFE9D1D}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 Create Module (HKLM-x32\...\{35709A4D-0D4F-4CBD-BE15-4361885217A6}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 Edit Module (HKLM-x32\...\{E2318CE7-8F9A-48DD-B85B-BAAD3097CA6D}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 Forms Module (HKLM-x32\...\{1FA232C6-024E-4085-8A8D-8A065339EF75}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 Insert Module (HKLM-x32\...\{946BF77C-726A-4ABE-9490-585EF18BFBDC}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 OCR Module (HKLM-x32\...\{875294AB-A642-40AF-ABC9-87F8E6AD59BA}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 Review Module (HKLM-x32\...\{2D95BE46-24F6-4065-99AB-BDDB867DCE01}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 Secure Module (HKLM-x32\...\{AAE9B03F-9205-4C26-948F-10584D7D410D}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 View Module (HKLM-x32\...\{719A8CE6-9E05-4321-833C-E84FAD8B68DF}) (Version: 6.1.8.15098 - LULU Software Limited)

SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden

Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden

Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden

TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden

UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden

UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version:  - Tangysoft Ltd.)

VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)

WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden

Windows-Treiberpaket - ASUS (ATP) Mouse  (03/17/2014 1.0.0.207) (HKLM\...\AA2CC56D4BBEE037DC99871F5F6551133D2A0CC3) (Version: 03/17/2014 1.0.0.207 - ASUS)

WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-192083289-1371779681-2328390087-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
 

==================== Restore Points  =========================
 

17-04-2015 17:49:07 Geplanter Prüfpunkt

19-04-2015 19:00:07 Windows-Sicherung

20-04-2015 13:10:08 Installed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

20-04-2015 13:12:44 OpenOffice 4.0.1 wird installiert

20-04-2015 13:43:51 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {28198945-1BD0-412E-AF7F-89CE88D1E4EB} - System32\Tasks\chipSWU => Cscript.exe "C:\Program Files (x86)\chip\Internet Explorer\swu.vbs"

Task: {2D3A380B-865D-44CD-827A-6CA2CA80F448} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)

Task: {3395A489-0F48-4FDF-BFB4-AC808946233C} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {3E7485B7-4CC9-4259-8E69-62A7FA963BD8} - System32\Tasks\{C653AA2D-C29F-4BDB-9763-6D35C4490CC9} => pcalua.exe -a E:\WinFlash_Win8_64_VER2420\Setup.exe -d E:\WinFlash_Win8_64_VER2420

Task: {48515C69-566C-403E-8480-8D15322B2C4C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {5B830D2D-3A99-4BFB-88C7-17F82DEFC5D7} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {A256A3B7-D258-4E30-9188-0F602E094BAA} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {A82D695C-6B6D-4CD0-8553-9A180F45A47E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-01-20] (Piriform Ltd)

Task: {E0ED4FB4-3FC7-4A82-BC5F-46239128A5E4} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2014-03-31] (AsusTek)

Task: {E1242B1C-E9EF-4F7E-B202-BC983B6601F5} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {ED02416B-B0FB-4695-81B2-B60A76CFDEF6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2015-01-21 04:06 - 2015-01-21 04:06 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll

2015-02-20 05:42 - 2015-02-20 05:42 - 00382072 ____N () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll

2015-04-15 10:16 - 2015-04-15 10:16 - 16863920 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== Internet Explorer trusted/restricted ===============
 

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-192083289-1371779681-2328390087-1000\Control Panel\Desktop\\Wallpaper -> 

DNS Servers: 192.168.192.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-192083289-1371779681-2328390087-500 - Administrator - Disabled)

Gast (S-1-5-21-192083289-1371779681-2328390087-501 - Limited - Disabled)

User (S-1-5-21-192083289-1371779681-2328390087-1000 - Administrator - Enabled) => C:\Users\User
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (04/20/2015 07:55:51 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (04/20/2015 07:48:34 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/20/2015 06:29:01 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (04/20/2015 03:07:09 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (04/20/2015 03:07:03 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (04/20/2015 01:31:20 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/18/2015 09:52:48 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000

Name des fehlerhaften Moduls: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000001915

ID des fehlerhaften Prozesses: 0x1a70

Startzeit der fehlerhaften Anwendung: 0xvlc.exe0

Pfad der fehlerhaften Anwendung: vlc.exe1

Pfad des fehlerhaften Moduls: vlc.exe2

Berichtskennung: vlc.exe3
 

Error: (04/18/2015 07:58:58 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18798, Zeitstempel: 0x5507b864

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000004ad94

ID des fehlerhaften Prozesses: 0x790

Startzeit der fehlerhaften Anwendung: 0xvlc.exe0

Pfad der fehlerhaften Anwendung: vlc.exe1

Pfad des fehlerhaften Moduls: vlc.exe2

Berichtskennung: vlc.exe3
 

Error: (04/18/2015 01:47:23 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18798, Zeitstempel: 0x5507b864

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000004ad94

ID des fehlerhaften Prozesses: 0x1100

Startzeit der fehlerhaften Anwendung: 0xvlc.exe0

Pfad der fehlerhaften Anwendung: vlc.exe1

Pfad des fehlerhaften Moduls: vlc.exe2

Berichtskennung: vlc.exe3
 

Error: (04/15/2015 07:40:30 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

System errors:

=============

Error: (04/20/2015 07:57:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (04/20/2015 07:57:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (04/20/2015 07:57:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (04/20/2015 07:57:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "ZAtheros Bt and Wlan Coex Agent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (04/20/2015 07:57:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Soda PDF 6 Creator" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (04/20/2015 07:57:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (04/20/2015 07:57:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "AtherosSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (04/20/2015 07:57:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (04/20/2015 07:57:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (04/20/2015 07:57:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Intel(R) HD Graphics Control Panel Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

Microsoft Office Sessions:

=========================

Error: (04/20/2015 07:55:51 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\Downloads\esetsmartinstaller_deu.exe
 

Error: (04/20/2015 07:48:34 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/20/2015 06:29:01 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe
 

Error: (04/20/2015 03:07:09 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\Downloads\esetsmartinstaller_deu.exe
 

Error: (04/20/2015 03:07:03 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\Downloads\esetsmartinstaller_deu.exe
 

Error: (04/20/2015 01:31:20 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/18/2015 09:52:48 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: vlc.exe2.1.5.000000000vlc.exe2.1.5.000000000c000000500000000000019151a7001d07a01649ee32cC:\Program Files\VideoLAN\VLC\vlc.exeC:\Program Files\VideoLAN\VLC\vlc.exe7c7616c5-e604-11e4-9bb6-ac9e17d23840
 

Error: (04/18/2015 07:58:58 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: vlc.exe2.1.5.000000000ntdll.dll6.1.7601.187985507b864c0000005000000000004ad9479001d079f4630ca995C:\Program Files\VideoLAN\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dll957dde47-e5f4-11e4-9bb6-ac9e17d23840
 

Error: (04/18/2015 01:47:23 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: vlc.exe2.1.5.000000000ntdll.dll6.1.7601.187985507b864c0000005000000000004ad94110001d079cd3de22cf4C:\Program Files\VideoLAN\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dllacb9b61a-e5c0-11e4-9bb6-ac9e17d23840
 

Error: (04/15/2015 07:40:30 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Pentium(R) CPU N3540 @ 2.16GHz

Percentage of memory in use: 27%

Total physical RAM: 8079.99 MB

Available physical RAM: 5879.79 MB

Total Pagefile: 16158.17 MB

Available Pagefile: 13422.11 MB

Total Virtual: 8192 MB

Available Virtual: 8191.84 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:698.54 GB) (Free:519.71 GB) NTFS

Drive d: (PCWELT_1_2014) (CDROM) (Total:1.72 GB) (Free:0 GB) CDFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: E06598BF)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=698.5 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Das war es, nervig ist immer die Werbeeinblendungen, wenn ich Firefox öffne und es geht immer ein Video an und von G Data kommt die Meldung, die ich oben beschrieben habe.
Verursacher dürfte diese Datei sein, C:\Users\User\AppData\Local\Temp\ICReinstall_OdfAddInForOfficeSetup-de_4.0.5309.exe /RR
danach fing es an.

Revo Uninstaller - Download - Filepony
damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.mozilla.org/de/kb/fi...einfach-loesen

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Code:

C:\Users\User\Downloads\OdfAddInForOfficeSetup-de_4.0.5309.exe        Variante von Win32/InstallCore.XA evtl. unerwünschte Anwendung

C:\Users\User\Downloads\YTDSetup.exe        Variante von Win32/Toolbar.Widgi.N evtl. unerwünschte Anwendung

Code:

 Results of screen317's Security Check version 1.00  

 Windows 7 Service Pack 1 x64 (UAC is enabled)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

G DATA INTERNET SECURITY   

 Antivirus up to date!   
 `````````Anti-malware/Other Utilities Check:````````` 

 Adobe Flash Player 10 Flash Player out of Date! 

 Adobe Flash Player 17.0.0.169  

 Adobe Reader XI  

 Mozilla Firefox (37.0.1) 
 ````````Process Check: objlist.exe by Laurent````````  

 G Data InternetSecurity Firewall GDFirewallTray.exe 

 G Data InternetSecurity Firewall GDFwSvcx64.exe 
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-04-2015

Ran by User (administrator) on RWE-HOTTE on 21-04-2015 17:41:48

Running from C:\Users\User\Desktop

Loaded Profiles: User (Available profiles: User)

Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 11 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe

(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe

(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe

(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE

(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(LULU SOFTWARE LIMITED) C:\Program Files (x86)\Soda PDF 6\creator-ws.exe

(LULU SOFTWARE LIMITED) C:\Program Files (x86)\Soda PDF 6\ws.exe

(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe

(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltSur64.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10c.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1855608 2015-02-20] (G DATA Software AG)

HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-11-28] (Geek Software GmbH)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2024800 2014-06-04] (Wondershare)

HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe,

HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)

HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31344744 2015-02-26] (Skype Technologies S.A.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-02-14]

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKU\S-1-5-21-192083289-1371779681-2328390087-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-192083289-1371779681-2328390087-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-192083289-1371779681-2328390087-1000 -> {8F17D790-19DE-42BC-914D-DF279FFCCEFB} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}

BHO: CHIP Best Deal BHO -> {7553EA3C-F8DA-4188-B7BC-956894EA54F5} -> C:\Program Files (x86)\chip\Internet Explorer\chip64.dll [2014-11-18] ()

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-02-23] (Oracle Corporation)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-02-23] (Oracle Corporation)

BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20] (Hewlett-Packard Co.)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)

BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20] (Hewlett-Packard Co.)

Toolbar: HKLM-x32 - Soda PDF 6 Toolbar - {35251526-B7A4-44E4-8B2E-FD62AE267B82} - C:\Program Files (x86)\Soda PDF 6\creator-ie-plugin.dll [2014-02-20] (LULU SOFTWARE LIMITED)

DPF: HKLM-x32 {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.com/select/asusTek_sys_ctrl3.cab

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.192.1
 

FireFox:

========

FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1y5ntcs5.default-1429620678342

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()

FF Plugin: @java.com/DTPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-02-23] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.75.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-02-23] (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)

FF Plugin-x32: Soda PDF 6 -> C:\Program Files (x86)\Soda PDF 6\np-previewer.dll [2014-02-20] (LULU SOFTWARE LIMITED)

FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-02-14]

FF HKLM-x32\...\Firefox\Extensions: [soda_pdf_6_conv@sodapdf.com] - C:\Program Files (x86)\Soda PDF 6\resources\firefoxextension

FF Extension: Soda PDF 6 Creator - C:\Program Files (x86)\Soda PDF 6\resources\firefoxextension [2015-03-10]

FF HKU\S-1-5-21-192083289-1371779681-2328390087-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

S2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider) [File not signed]

R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2528888 2015-04-16] (G Data Software AG)

R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [965240 2015-02-20] (G Data Software AG)

R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [3672560 2015-04-07] (G Data Software AG)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)

R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [3193080 2015-02-20] (G Data Software AG)

R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [789112 2015-03-04] (G Data Software AG)

R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]

R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed]

S2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89864 2014-12-11] (Hewlett-Packard Company)

S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-12] (Intel Corporation)

S3 LULU Software CrashHandler; C:\Program Files (x86)\Soda PDF 6\crash-handler-ws.exe [744800 2014-02-20] (LULU SOFTWARE LIMITED)

S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]

S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]

R3 Soda PDF 6; C:\Program Files (x86)\Soda PDF 6\ws.exe [1573728 2014-02-20] (LULU SOFTWARE LIMITED)

R2 Soda PDF 6 Creator; C:\Program Files (x86)\Soda PDF 6\creator-ws.exe [620384 2014-02-20] (LULU SOFTWARE LIMITED)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

S2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-02-25] (Atheros) [File not signed]
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R3 ATP; C:\Windows\System32\DRIVERS\AsusTP.sys [71952 2014-03-31] (ASUS Corporation)

R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [150016 2015-04-15] (G Data Software AG)

R3 GDKBB; C:\Windows\system32\drivers\GDKBB64.sys [27648 2015-04-15] (G Data Software AG)

R1 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [20992 2015-04-15] (G Data Software AG)

R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [230400 2015-04-15] (G Data Software AG)

R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [75776 2015-04-15] (G Data Software AG)

R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64512 2015-04-20] (G Data Software AG)

R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2015-02-16] (G Data Software)

R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [124928 2015-04-15] (G Data Software AG)

R3 TXEIx64; C:\Windows\System32\DRIVERS\TXEIx64.sys [88592 2014-02-17] (Intel Corporation)
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-04-21 17:25 - 2015-04-21 17:25 - 00000229 _____ () C:\Users\User\Documents\Eset.txt

2015-04-21 14:51 - 2015-04-21 14:51 - 00000000 ____D () C:\Users\User\Desktop\Alte Firefox-Daten

2015-04-21 14:39 - 2015-04-21 15:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2015-04-21 14:39 - 2015-04-21 15:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2015-04-21 14:39 - 2015-04-21 14:39 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-04-21 14:39 - 2015-04-21 14:39 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk

2015-04-21 14:25 - 2015-04-21 14:25 - 00001264 _____ () C:\Users\User\Desktop\Revo Uninstaller.lnk

2015-04-20 20:06 - 2015-04-20 20:06 - 00028180 _____ () C:\Users\User\Desktop\Addition.txt

2015-04-20 20:05 - 2015-04-21 17:42 - 00013676 _____ () C:\Users\User\Desktop\FRST.txt

2015-04-20 20:04 - 2015-04-20 20:04 - 02099712 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe

2015-04-20 19:59 - 2015-04-20 19:59 - 00001771 _____ () C:\Users\User\Desktop\JRT.txt

2015-04-20 19:56 - 2015-04-20 19:56 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-RWE-HOTTE-Windows-7-Professional-(64-bit).dat

2015-04-20 19:56 - 2015-04-20 19:56 - 00000000 ____D () C:\RegBackup

2015-04-20 19:53 - 2015-04-20 19:53 - 02684539 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe

2015-04-20 19:43 - 2015-04-20 19:45 - 00000000 ____D () C:\AdwCleaner

2015-04-20 17:59 - 2015-04-21 17:41 - 00000000 ____D () C:\FRST

2015-04-20 15:07 - 2015-04-20 15:07 - 00000000 ____D () C:\Program Files (x86)\ESET

2015-04-20 15:06 - 2015-04-20 15:06 - 02347384 _____ (ESET) C:\Users\User\Downloads\esetsmartinstaller_deu.exe

2015-04-20 13:50 - 2015-04-20 13:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA INTERNET SECURITY

2015-04-20 13:15 - 2015-04-20 13:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\OpenOffice

2015-04-20 13:14 - 2015-04-20 13:14 - 00001116 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk

2015-04-20 13:14 - 2015-04-20 13:14 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1

2015-04-20 13:13 - 2015-04-20 13:13 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4

2015-04-20 13:09 - 2015-04-20 13:10 - 00000000 ____D () C:\Users\User\Desktop\OpenOffice 4.0.1 (de) Installation Files

2015-04-20 12:58 - 2015-04-20 12:58 - 04911297 _____ () C:\Users\User\Downloads\OdfAddInForOfficeSetup-de_4.0.5309 [1].exe

2015-04-20 12:57 - 2015-04-20 12:58 - 00766640 _____ (Prog ) C:\Users\User\Downloads\OdfAddInForOfficeSetup-de_4.0.5309.exe

2015-04-20 12:51 - 2015-04-20 12:52 - 00064834 _____ () C:\Users\User\Desktop\DP Mai-1.odt

2015-04-15 11:28 - 2015-04-15 11:28 - 00381727 _____ () C:\Users\User\Downloads\Winflash_Win81_64_VER2420.zip

2015-04-15 11:23 - 2015-04-15 11:23 - 00357797 _____ () C:\Users\User\Downloads\Winflash_WIN7_32_64_z2301.zip

2015-04-15 11:08 - 2015-04-15 11:08 - 00000000 ___SD () C:\Windows\system32\CompatTel

2015-04-15 11:08 - 2015-04-15 11:08 - 00000000 ____D () C:\Windows\system32\appraiser

2015-04-15 10:58 - 2013-08-01 11:33 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll

2015-04-15 10:56 - 2015-04-15 10:57 - 06401659 _____ () C:\Users\User\Downloads\Chipset_Intel_Win7_64_VER9441006.zip

2015-04-15 10:52 - 2015-04-15 10:52 - 00381727 _____ () C:\Users\User\Downloads\WinFlash_Win7_32_VER2420.zip

2015-04-15 10:50 - 2015-04-15 10:50 - 00000000 ____D () C:\Users\User\Downloads\WinFlash_Win7_64_VER301(1)

2015-04-15 10:49 - 2015-04-15 10:49 - 00909962 _____ () C:\Users\User\Downloads\WinFlash_Win7_64_VER301(1).zip

2015-04-15 10:48 - 2015-04-15 10:48 - 00909962 _____ () C:\Users\User\Downloads\WinFlash_Win7_64_VER301.zip

2015-04-15 10:45 - 2015-04-15 10:45 - 00003130 _____ () C:\Windows\System32\Tasks\{C653AA2D-C29F-4BDB-9763-6D35C4490CC9}

2015-04-15 10:38 - 2015-04-15 10:38 - 00027648 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBB64.sys

2015-04-15 10:38 - 2015-04-15 10:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_GDKBB64_01007.Wdf

2015-04-15 10:23 - 2015-03-25 05:24 - 03298816 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 02553856 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-04-15 10:23 - 2015-03-25 05:24 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-04-15 10:23 - 2015-03-25 05:23 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-04-15 10:23 - 2015-03-25 05:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-04-15 10:23 - 2015-03-25 05:23 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-04-15 10:23 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-04-15 10:23 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-04-15 10:23 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-04-15 10:23 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-04-15 10:23 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-04-15 10:23 - 2015-03-23 05:25 - 00769536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2015-04-15 10:23 - 2015-03-23 05:25 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2015-04-15 10:23 - 2015-03-23 05:24 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2015-04-15 10:23 - 2015-03-23 05:24 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2015-04-15 10:23 - 2015-03-23 05:24 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll

2015-04-15 10:23 - 2015-03-23 05:24 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2015-04-15 10:23 - 2015-03-23 05:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2015-04-15 10:23 - 2015-03-23 05:17 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2015-04-15 10:23 - 2015-03-17 07:22 - 05557696 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-04-15 10:23 - 2015-03-17 07:22 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2015-04-15 10:23 - 2015-03-17 07:22 - 00095672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-04-15 10:23 - 2015-03-17 07:19 - 01727904 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-04-15 10:23 - 2015-03-17 07:17 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2015-04-15 10:23 - 2015-03-17 07:17 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2015-04-15 10:23 - 2015-03-17 07:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2015-04-15 10:23 - 2015-03-17 07:16 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-04-15 10:23 - 2015-03-17 07:16 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2015-04-15 10:23 - 2015-03-17 07:16 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2015-04-15 10:23 - 2015-03-17 07:15 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2015-04-15 10:23 - 2015-03-17 07:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2015-04-15 10:23 - 2015-03-17 07:15 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2015-04-15 10:23 - 2015-03-17 07:13 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-04-15 10:23 - 2015-03-17 07:13 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2015-04-15 10:23 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2015-04-15 10:23 - 2015-03-17 06:59 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-04-15 10:23 - 2015-03-17 06:57 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2015-04-15 10:23 - 2015-03-17 06:56 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2015-04-15 10:23 - 2015-03-17 06:56 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2015-04-15 10:23 - 2015-03-17 06:56 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2015-04-15 10:23 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2015-04-15 10:23 - 2015-03-17 06:56 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2015-04-15 10:23 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2015-04-15 10:23 - 2015-03-17 06:56 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2015-04-15 10:23 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-04-15 10:23 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 06:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 05:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2015-04-15 10:23 - 2015-03-17 05:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2015-04-15 10:23 - 2015-03-17 05:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 05:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 05:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2015-04-15 10:23 - 2015-03-17 05:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2015-04-15 10:23 - 2015-03-10 05:25 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-04-15 10:23 - 2015-03-10 05:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-04-15 10:23 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-04-15 10:23 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-04-15 10:23 - 2015-03-05 07:12 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-04-15 10:23 - 2015-03-05 06:05 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-04-15 10:23 - 2015-01-28 01:36 - 01239720 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe

2015-04-15 10:22 - 2015-04-02 02:17 - 00389808 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-04-15 10:22 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-04-15 10:22 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-04-15 10:22 - 2015-03-13 06:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-04-15 10:22 - 2015-03-13 06:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-04-15 10:22 - 2015-03-13 06:09 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-04-15 10:22 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-04-15 10:22 - 2015-03-13 06:08 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-04-15 10:22 - 2015-03-13 06:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-04-15 10:22 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-04-15 10:22 - 2015-03-13 06:06 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-04-15 10:22 - 2015-03-13 06:00 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-04-15 10:22 - 2015-03-13 05:59 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-04-15 10:22 - 2015-03-13 05:55 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-04-15 10:22 - 2015-03-13 05:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-04-15 10:22 - 2015-03-13 05:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-04-15 10:22 - 2015-03-13 05:53 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-04-15 10:22 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-04-15 10:22 - 2015-03-13 05:44 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-04-15 10:22 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-04-15 10:22 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-04-15 10:22 - 2015-03-13 05:40 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-04-15 10:22 - 2015-03-13 05:32 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-04-15 10:22 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-04-15 10:22 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-04-15 10:22 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-04-15 10:22 - 2015-03-13 05:27 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-04-15 10:22 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-04-15 10:22 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-04-15 10:22 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-04-15 10:22 - 2015-03-13 05:23 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-04-15 10:22 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-04-15 10:22 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-04-15 10:22 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-04-15 10:22 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-04-15 10:22 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-04-15 10:22 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-04-15 10:22 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-04-15 10:22 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-04-15 10:22 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-04-15 10:22 - 2015-03-13 05:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-04-15 10:22 - 2015-03-13 05:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-04-15 10:22 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-04-15 10:22 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-04-15 10:22 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-04-15 10:22 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-04-15 10:22 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-04-15 10:22 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-04-15 10:22 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-04-15 10:22 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-04-15 10:22 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-04-15 10:22 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-04-15 10:22 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-04-15 10:22 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-04-15 10:22 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-04-15 10:22 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-04-15 10:22 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-04-15 10:22 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-04-15 10:22 - 2015-03-04 06:55 - 00367552 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2015-04-15 10:22 - 2015-03-04 06:41 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll

2015-04-15 10:22 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clfsw32.dll

2015-04-15 10:22 - 2015-02-25 05:18 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys

2015-04-15 10:11 - 2015-04-15 10:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in

2015-04-08 22:46 - 2015-04-08 22:52 - 581496318 _____ () C:\Users\User\Downloads\Illuminati_2015-04-06_2015_122688.mp4

2015-04-08 22:45 - 2015-04-08 22:51 - 491444971 _____ () C:\Users\User\Downloads\Die_Comedy_Couch_mit_Kim_Fisher_2015-04-07_0220_122688.mp4

2015-04-08 22:17 - 2015-04-08 22:35 - 425881968 _____ () C:\Users\User\Downloads\Ohne_Ausweg_2015-04-06_0345_122688.mp4

2015-04-08 22:16 - 2015-04-08 22:45 - 761037373 _____ () C:\Users\User\Downloads\Die_Schlager_des_Jahres_2014_2015-04-06_0845_122688.mp4

2015-04-08 22:16 - 2015-04-08 22:24 - 140148029 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-04-05_2345_122688.mp4

2015-04-08 22:15 - 2015-04-08 22:36 - 556524950 _____ () C:\Users\User\Downloads\Das_goldene_Ufer_2015-04-06_0255_122688.mp4

2015-04-08 22:15 - 2015-04-08 22:34 - 390949119 _____ () C:\Users\User\Downloads\Steven_Seagal_Kill_Switch_2015-04-06_0220_122688.mp4

2015-04-08 22:14 - 2015-04-08 22:40 - 930313604 _____ () C:\Users\User\Downloads\Rosamunde_Pilcher_Ein_einziger_Kuss_2015-04-06_2015_122688.mp4

2015-04-08 22:14 - 2015-04-08 22:35 - 204528270 _____ () C:\Users\User\Downloads\Der_Koenig_von_Mallorca_Das_Phaenomen_Jue_2015-04-06_2210_122688.mp4

2015-04-08 22:14 - 2015-04-08 22:34 - 419401949 _____ () C:\Users\User\Downloads\Alarmstufe_Rot_2_2015-04-07_0045_122688.mp4

2015-04-08 22:14 - 2015-04-08 22:33 - 424242424 _____ () C:\Users\User\Downloads\G_I_Joe_Die_Abrechnung_2015-04-06_2015_122688.mp4

2015-04-08 22:13 - 2015-04-08 22:36 - 574859351 _____ () C:\Users\User\Downloads\Belle_de_Jour_Schoene_des_Tages_2015-04-07_2350_122688.mp4

2015-04-08 22:13 - 2015-04-08 22:34 - 465449132 _____ () C:\Users\User\Downloads\Depression_Eine_Krankheit_erobert_die__2015-04-08_0245_122688.mp4

2015-04-08 22:13 - 2015-04-08 22:17 - 145707400 _____ () C:\Users\User\Downloads\Das_Beste_aus_Verstehen_Sie_Spass__2015-04-08_0415_122688.mp4

2015-04-07 06:58 - 2015-04-07 06:58 - 00000000 ___SD () C:\Windows\SysWOW64\GWX

2015-04-07 06:58 - 2015-04-07 06:58 - 00000000 ___SD () C:\Windows\system32\GWX

2015-04-06 15:09 - 2015-01-29 03:18 - 906833541 _____ () C:\Users\User\Desktop\96 hours Taken 3.mkv

2015-04-06 15:04 - 2015-04-07 14:06 - 00000000 ____D () C:\Users\User\Documents\Peter

2015-04-06 14:32 - 2015-04-06 14:39 - 585113309 _____ () C:\Users\User\Downloads\The_Da_Vinci_Code_Sakrileg_2015-04-04_2215_122688.mp4

2015-04-06 14:29 - 2015-04-06 14:33 - 193020536 _____ () C:\Users\User\Downloads\Sportschau_2015-04-05_1845_122688.mp4

2015-04-06 14:26 - 2015-04-06 14:32 - 323286126 _____ () C:\Users\User\Downloads\Wacken_2013_Anthrax_Live_Musik_vom_Wacken_Festival_2015-04-05_0405_122688.mp4

2015-04-06 14:25 - 2015-04-06 14:32 - 323349234 _____ () C:\Users\User\Downloads\Wacken_2013_Alice_Cooper_und_Motoerhead_Live_Musik_vo_2015-04-04_2110_122688.mp4

2015-04-06 14:23 - 2015-04-06 14:35 - 723666773 _____ () C:\Users\User\Downloads\Das_Beste_aus_30_Jahren_Verstehen_Sie_S_2015-04-04_2015_122688.mp4

2015-04-06 14:23 - 2015-04-06 14:32 - 482955102 _____ () C:\Users\User\Downloads\Bella_Block_Die_schoenste_Nacht_des_Lebens_2015-04-04_2015_122688.mp4

2015-04-06 14:21 - 2015-04-06 14:27 - 496576732 _____ () C:\Users\User\Downloads\das_aktuelle_sportstudio_2015-04-04_2300_122688.mp4

2015-04-05 18:49 - 2015-04-05 18:49 - 00000000 ____D () C:\Users\User\Desktop\Uploader.Presents-Non.Stop.TS.MD.German.x264.READ

2015-04-04 15:48 - 2015-04-04 15:52 - 334543890 _____ () C:\Users\User\Downloads\Brain_Games_Teste_Dein_Gehirn_6__2015-04-03_2015_122688.mp4

2015-04-04 15:48 - 2015-04-04 15:52 - 274013340 _____ () C:\Users\User\Downloads\zdf_bauhaus_Tim_Bendzko_2015-04-04_0415_122688.mp4

2015-04-04 15:48 - 2015-04-04 15:48 - 496843927 _____ () C:\Users\User\Downloads\Geheimnis_im_blauen_Schloss_2015-04-04_0255_122688.mp4

2015-04-04 15:48 - 2015-04-04 15:48 - 489822247 _____ () C:\Users\User\Downloads\Der_Pfarrer_und_das_Maedchen_2015-04-03_2115_122688.mp4

2015-04-04 14:19 - 2015-04-04 14:33 - 499372189 _____ () C:\Users\User\Downloads\Die_Alpen_Unsere_Berge_von_oben_2015-04-03_2015_122688.mp4

2015-04-04 14:18 - 2015-04-04 14:34 - 379646136 _____ () C:\Users\User\Downloads\Koelner_Treff_2015-03-27_2200_122688.mp4

2015-04-04 14:17 - 2015-04-04 14:34 - 710178099 _____ () C:\Users\User\Downloads\Papillon_2015-03-26_0155_122688.mp4

2015-04-04 14:17 - 2015-04-04 14:29 - 426540402 _____ () C:\Users\User\Downloads\Utta_Danella_Lisa_schwimmt_sich_frei_2015-03-27_2015_122688.mp4

2015-04-04 13:55 - 2015-04-04 14:15 - 923278063 _____ () C:\Users\User\Downloads\Echo_2015_Der_deutsche_Musikpreis_2015-03-26_2015_122688.mp4

2015-04-04 13:53 - 2015-04-04 14:10 - 467415232 _____ () C:\Users\User\Downloads\Road_Trip_2_Die_Biermeister_2015-03-29_0355_122688.mp4

2015-04-04 13:52 - 2015-04-04 14:10 - 387451172 _____ () C:\Users\User\Downloads\Unverschaemtes_Glueck_2015-03-25_2015_122688.mp4

2015-04-04 13:51 - 2015-04-04 14:11 - 553643365 _____ () C:\Users\User\Downloads\Eat_Pray_Love_2015-03-25_2015_122688.mp4

2015-04-04 13:51 - 2015-04-04 14:06 - 394090467 _____ () C:\Users\User\Downloads\Alleine_war_gestern_2015-03-24_1830_122688.mp4

2015-04-04 13:50 - 2015-04-04 14:10 - 554833981 _____ () C:\Users\User\Downloads\Lady_Chatterley_2015-03-25_0105_122688.mp4

2015-04-04 13:50 - 2015-04-04 14:05 - 351144329 _____ () C:\Users\User\Downloads\Walking_Tall_Auf_eigene_Faust_2015-04-02_2205_122688.mp4

2015-04-04 13:49 - 2015-04-04 14:13 - 828554760 _____ () C:\Users\User\Downloads\Willkommen_bei_Carmen_Nebel_Stars_Musik_und_Ueberraschungen_aus_Hann_2015-04-02_2015_122688.mp4

2015-04-04 13:49 - 2015-04-04 14:11 - 596105607 _____ () C:\Users\User\Downloads\Rossini_Oder_die_moerderische_Frage_we_2015-04-02_2300_122688.mp4

2015-04-04 13:49 - 2015-04-04 14:08 - 473257040 _____ () C:\Users\User\Downloads\Tatort_Verdammt_2015-04-02_2015_122688.mp4

2015-04-03 19:42 - 2015-04-03 19:47 - 145286478 _____ () C:\Users\User\Downloads\Sportclub_Stars_Martin_Schwalb_2015-03-22_2345_122688.mp4

2015-04-03 19:41 - 2015-04-03 19:52 - 537408889 _____ () C:\Users\User\Downloads\Opa_wird_verkauft_2015-03-21_2015_122688.mp4

2015-04-03 19:41 - 2015-04-03 19:48 - 291670270 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-03-18_2345_122688.mp4

2015-04-03 19:37 - 2015-04-03 19:47 - 458530158 _____ () C:\Users\User\Downloads\The_Team_Folge3_2015-03-22_2200_122688.mp4

2015-04-03 19:37 - 2015-04-03 19:45 - 365816657 _____ () C:\Users\User\Downloads\Marie_Brand_und_der_schoene_Schein_2015-03-14_2015_122688.mp4

2015-04-03 19:36 - 2015-04-03 19:47 - 475388247 _____ () C:\Users\User\Downloads\Schmetterling_und_Taucherglocke_2015-03-12_2225_122688.mp4

2015-04-03 19:20 - 2015-04-03 19:26 - 159506669 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-22_2345_122688.mp4

2015-04-03 19:19 - 2015-04-03 19:30 - 475158512 _____ () C:\Users\User\Downloads\The_Team_Folge2_2015-03-15_2200_122688.mp4

2015-04-03 19:19 - 2015-04-03 19:25 - 117573359 _____ () C:\Users\User\Downloads\Kalabrien_Italiens_vergessene_Region_2015-03-23_0410_122688.mp4

2015-04-03 19:17 - 2015-04-03 19:28 - 327330406 _____ () C:\Users\User\Downloads\Opa_ledig_jung_2015-03-13_2015_122688.mp4

2015-04-03 19:17 - 2015-04-03 19:25 - 229733322 _____ () C:\Users\User\Downloads\WISO_2015-03-10_0255_122688.mp4

2015-04-03 19:16 - 2015-04-03 19:30 - 454030000 _____ () C:\Users\User\Downloads\Wanderlust_Der_Trockenmauerweg_Mallorca_Der_Steve_2015-03-15_2015_122688.mp4

2015-04-03 19:16 - 2015-04-03 19:30 - 430891971 _____ () C:\Users\User\Downloads\Wunderschoen_Die_Vulkaninseln_Siziliens_Urlaub_auf__2015-03-15_2015_122688.mp4

2015-04-03 19:16 - 2015-04-03 19:28 - 358713981 _____ () C:\Users\User\Downloads\Das_haelt_kein_Jahr__2015-03-15_2015_122688.mp4

2015-04-03 19:15 - 2015-04-03 19:19 - 132355849 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-08_2345_122688.mp4

2015-04-03 14:25 - 2015-04-03 14:30 - 431214813 _____ () C:\Users\User\Downloads\Wunderschoen_Die_Algarve_Portugals_sonniger_Sueden_2015-03-15_1415_122688.mp4

2015-04-03 14:24 - 2015-04-03 14:26 - 129831763 _____ () C:\Users\User\Downloads\ZDFzoom_Die_Dortmund_Story_2015-03-18_2315_122688.mp4

2015-04-03 13:49 - 2015-04-03 13:58 - 423648302 _____ () C:\Users\User\Downloads\Love_Happens_2015-03-11_2015_122688.mp4

2015-04-03 13:48 - 2015-04-03 13:58 - 535812526 _____ () C:\Users\User\Downloads\The_Voice_Kids_2015-03-13_2015_122688.mp4

2015-04-03 13:48 - 2015-04-03 13:50 - 79013784 _____ () C:\Users\User\Downloads\Hollands_sonniger_Sueden_Ferien_an_der_Nordseekueste_von_Zeeland_2015-03-09_0445_122688.mp4

2015-04-03 13:46 - 2015-04-03 13:58 - 567107616 _____ () C:\Users\User\Downloads\The_Voice_Kids_2015-03-27_2015_122688.mp4

2015-04-03 13:45 - 2015-04-03 13:55 - 422966784 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-04-02_2325_122688.mp4

2015-04-03 13:43 - 2015-04-03 13:51 - 475543075 _____ () C:\Users\User\Downloads\Tatort_Happy_Birthday_Sarah_2015-03-31_2015_122688.mp4

2015-04-03 13:43 - 2015-04-03 13:47 - 393050126 _____ () C:\Users\User\Downloads\Tatort_Spiel_auf_Zeit_2015-03-27_2200_122688.mp4

2015-03-31 21:23 - 2015-04-01 23:26 - 00634880 _____ () C:\Users\User\Desktop\Stundenerhebung März 2015.xls

2015-03-29 20:35 - 2015-03-29 22:22 - 00000000 ____D () C:\Users\User\Desktop\Beratungsgespräche

2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight

2015-03-29 12:23 - 2015-03-29 12:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2015-03-29 12:22 - 2015-03-29 12:22 - 13087456 _____ (Microsoft Corporation) C:\Users\User\Downloads\Silverlight_x64.exe

2015-03-27 16:08 - 2015-03-27 16:09 - 00000000 ____D () C:\Users\User\Desktop\Microsoft Office Professional 2003 SP3 Deutsch Ger

2015-03-27 16:02 - 2015-03-27 16:02 - 00000000 ____D () C:\Users\User\Documents\Drucken

2015-03-27 16:02 - 2013-06-06 15:53 - 00565760 _____ () C:\Users\User\Documents\Stundenerhebung Juni 2013.xls

2015-03-27 16:02 - 2013-05-23 00:10 - 00038400 _____ () C:\Users\User\Documents\Verkauf.xls

2015-03-27 16:02 - 2011-01-12 14:15 - 283741092 _____ () C:\Users\User\Documents\Thyssen Krupp Film von SMS .avi

2015-03-27 16:01 - 2011-01-12 13:58 - 269262848 _____ () C:\Users\User\Documents\CAP0199_DE.576p25.mpeg-1.mpg

2015-03-26 14:33 - 2015-03-26 14:34 - 00000000 ____D () C:\Users\User\Documents\Saison Übersicht Gladbach

2015-03-26 14:29 - 2015-03-26 14:33 - 00000000 ____D () C:\Users\User\Documents\AK Fussball Spieler ABC

2015-03-25 16:14 - 2015-03-25 16:17 - 207146482 _____ () C:\Users\User\Downloads\Marius_Mueller_Westernhagen_Live_in_Base_2015-02-28_2015_122688.mp4

2015-03-25 16:13 - 2015-03-25 16:18 - 422494491 _____ () C:\Users\User\Downloads\Die_Rosel_vom_Schwarzwald_2015-02-28_2015_122688.mp4

2015-03-25 15:48 - 2015-03-25 15:52 - 541919016 _____ () C:\Users\User\Downloads\Die_Dolmetscherin_2015-02-28_2015_122688.mp4

2015-03-25 15:47 - 2015-03-25 15:50 - 289777406 _____ () C:\Users\User\Downloads\Markus_Lanz_2015-02-25_2345_122688.mp4

2015-03-25 15:47 - 2015-03-25 15:49 - 116264599 _____ () C:\Users\User\Downloads\ZDFzoom_Vorsicht_Kreditfalle_Wie_Kunden_abgezoc_2015-02-25_2315_122688.mp4

2015-03-25 15:11 - 2015-03-25 15:28 - 407051367 _____ () C:\Users\User\Downloads\Das_Ende_einer_Affaere_2015-02-24_2200_122688.mp4

2015-03-25 15:11 - 2015-03-25 15:18 - 192852896 _____ () C:\Users\User\Downloads\X_Factor_Das_Unfassbare_Der_Kartengeber_Trinkgeld_Der_Baecker_Folge26_2015-02-28_0700_122688.mp4

2015-03-25 15:11 - 2015-03-25 15:17 - 129795686 _____ () C:\Users\User\Downloads\Die_Joerg_Knoer_Show_Sketche_und_Parodien_um_Prominente_2015-02-23_2245_122688.mp4

2015-03-25 15:10 - 2015-03-25 15:27 - 403718741 _____ () C:\Users\User\Downloads\In_einer_heissen_Nacht_2015-03-02_0040_122688.mp4

2015-03-25 15:09 - 2015-03-25 15:29 - 480413168 _____ () C:\Users\User\Downloads\The_Team_Folge1_2015-03-08_2200_122688.mp4

2015-03-25 15:09 - 2015-03-25 15:18 - 154281116 _____ () C:\Users\User\Downloads\Zeiglers_wunderbare_Welt_des_Fussballs_2015-03-02_0340_122688.mp4

2015-03-25 15:06 - 2015-03-25 15:21 - 396215436 _____ () C:\Users\User\Downloads\Blauwasserleben_2015-03-15_2015_122688.mp4

2015-03-25 15:06 - 2015-03-25 15:20 - 404006823 _____ () C:\Users\User\Downloads\Polizeiruf_110_Tod_im_Kraftwerk_2015-03-10_2250_122688.mp4

2015-03-25 15:06 - 2015-03-25 15:17 - 440482775 _____ () C:\Users\User\Downloads\Liebling_wir_haben_geerbt__2015-02-25_0905_122688.mp4

2015-03-25 10:01 - 2015-03-25 10:04 - 368467353 _____ () C:\Users\User\Downloads\Tatort_Das_Muli_2015-03-22_2015_122688.mp4

2015-03-22 19:02 - 2015-03-22 19:03 - 00001249 _____ () C:\DelFix.txt

2015-03-22 19:02 - 2015-03-22 19:02 - 00000000 ____D () C:\Windows\ERUNT
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-04-21 17:17 - 2015-01-08 12:03 - 01386107 _____ () C:\Windows\WindowsUpdate.log

2015-04-21 17:15 - 2015-02-14 13:24 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-04-21 14:25 - 2015-03-18 22:02 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group

2015-04-21 14:20 - 2015-03-13 08:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype

2015-04-20 20:20 - 2015-02-20 19:37 - 00049664 _____ () C:\Users\User\Desktop\Autogrammanforderung 2014.xls

2015-04-20 19:55 - 2009-07-14 06:45 - 00021680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-04-20 19:55 - 2009-07-14 06:45 - 00021680 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-04-20 19:54 - 2011-04-12 09:43 - 00698926 _____ () C:\Windows\system32\perfh007.dat

2015-04-20 19:54 - 2011-04-12 09:43 - 00149034 _____ () C:\Windows\system32\perfc007.dat

2015-04-20 19:54 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-04-20 19:47 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-04-20 16:21 - 2015-03-18 21:14 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-04-20 13:49 - 2015-02-13 17:16 - 00064512 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys

2015-04-20 13:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared

2015-04-20 13:35 - 2015-02-16 08:20 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps

2015-04-20 13:29 - 2009-07-14 06:45 - 00441024 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-04-20 13:08 - 2015-02-24 16:29 - 00000000 ____D () C:\Users\User\Documents\Autogrammadresse, Listen, Briefe

2015-04-20 10:31 - 2015-02-19 18:01 - 00000000 ____D () C:\Users\User\Desktop\Sarah

2015-04-18 21:52 - 2015-02-14 13:33 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc

2015-04-18 18:26 - 2015-02-14 16:14 - 00000000 ____D () C:\Users\User\AppData\Roaming\UseNeXT

2015-04-18 18:23 - 2015-03-12 08:18 - 00000000 ____D () C:\Users\User\Documents\UseNeXT

2015-04-17 17:49 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache

2015-04-17 17:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat

2015-04-17 10:38 - 2015-02-26 15:42 - 00000000 ____D () C:\Users\User\Documents\Eigene Scans

2015-04-15 21:32 - 2015-02-25 12:05 - 00000000 ____D () C:\Users\User\Documents\Abrechnungen Honorardozent

2015-04-15 11:06 - 2015-01-08 14:08 - 01592784 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2015-04-15 11:03 - 2015-02-13 18:29 - 00000000 ____D () C:\Windows\system32\MRT

2015-04-15 10:59 - 2015-02-13 18:29 - 128913832 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2015-04-15 10:58 - 2015-02-09 23:07 - 00000000 ____D () C:\Program Files (x86)\Intel

2015-04-15 10:40 - 2015-02-13 17:17 - 00075776 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys

2015-04-15 10:38 - 2015-02-13 17:16 - 00020992 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBFlt64.sys

2015-04-15 10:37 - 2015-02-13 17:16 - 00230400 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys

2015-04-15 10:37 - 2015-02-13 17:16 - 00150016 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys

2015-04-15 10:37 - 2015-02-13 17:16 - 00124928 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys

2015-04-15 10:16 - 2015-02-14 13:24 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-04-15 10:16 - 2015-02-14 13:24 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-04-15 10:16 - 2015-02-14 13:24 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-04-15 10:11 - 2015-01-08 14:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office

2015-04-09 19:35 - 2015-03-05 17:09 - 00000000 ____D () C:\Users\User\Desktop\Karina

2015-04-07 21:17 - 2015-02-17 22:29 - 00000000 ____D () C:\Users\User\Desktop\Qualitätshandbuch neu

2015-04-04 14:07 - 2015-03-19 17:04 - 00000000 ____D () C:\Users\User\Downloads\Save TV

2015-03-22 18:58 - 2015-03-18 22:18 - 00000000 ____D () C:\Windows\erdnt
 

==================== Files in the root of some directories =======
 

2015-02-13 17:16 - 2015-02-13 17:16 - 0000000 _____ () C:\Users\User\AppData\Roaming\gdfw.log

2015-02-13 17:16 - 2015-02-13 17:16 - 0000779 _____ () C:\Users\User\AppData\Roaming\gdscan.log

2015-02-14 13:57 - 2015-03-03 23:49 - 0001324 _____ () C:\ProgramData\hpzinstall.log
 

Some content of TEMP:

====================

C:\Users\User\AppData\Local\Temp\Quarantine.exe

C:\Users\User\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-04-17 17:42
 

==================== End Of Log ============================

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-04-2015

Ran by User at 2015-04-21 17:43:27

Running from C:\Users\User\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: G DATA INTERNET SECURITY (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}

AS: G DATA INTERNET SECURITY (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: G*DATA Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden

Adobe Flash Player 10 ActiveX (HKLM-x32\...\{B7B3E9B3-FB14-4927-894B-E9124509AF5A}) (Version: 10.0.32.18 - Adobe Systems, Inc.)

Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)

Anti-Twin (Installation 20.02.2015) (HKLM-x32\...\Anti-Twin 2015-02-20 20.44.25) (Version:  - Joerg Rosenthal, Germany)

ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.14 - ASUS)

BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden

CCleaner (HKLM\...\CCleaner) (Version: 5.02 - Piriform)

CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5306 - CDBurnerXP)

CHIP Best Deal (HKLM-x32\...\{7553EA3C-F8DA-4188-B7BC-956894EA54F5}) (Version: 1.4.21 - Ciuvo GmbH)

Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden

Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden

DJ_AIO_03_F4200_Software_Min (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden

ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.0.20150211 - Landesfinanzdirektion Thüringen)

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )

F4200 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden

G DATA INTERNET SECURITY (HKLM-x32\...\{AC68D2FF-1674-4C16-A536-A69FC11BBD82}) (Version: 25.1.0.4 - G DATA Software AG)

GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden

HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)

HP Deskjet F4200 All-In-One Driver Software 13.0 Rel. 3 (HKLM\...\{A00C9114-40E6-4C70-A619-7DF264B23485}) (Version: 13.0 - HP)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)

HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Support Solutions Framework (HKLM-x32\...\{E35601C0-BA8E-4F32-919A-C7EF4CA81F67}) (Version: 11.51.0048 - Hewlett-Packard Company)

HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)

HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden

HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden

HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden

HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden

HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden

HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)

Java 7 Update 75 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417075FF}) (Version: 7.0.750 - Oracle)

Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)

MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden

Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)

Mozilla Firefox 37.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.1 (x86 de)) (Version: 37.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)

PDF24 Creator 6.9.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)

Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.318 - Qualcomm Atheros Communications)

Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.27040 - Realtek Semiconductor Corp.)

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)

Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)

Skype™ 7.2 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.2.103 - Skype Technologies S.A.)

SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden

Soda PDF 6 Convert Module (HKLM-x32\...\{BB8E1BCF-AE3B-44F4-A3B1-BFDEEDFE9D1D}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 Create Module (HKLM-x32\...\{35709A4D-0D4F-4CBD-BE15-4361885217A6}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 Edit Module (HKLM-x32\...\{E2318CE7-8F9A-48DD-B85B-BAAD3097CA6D}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 Forms Module (HKLM-x32\...\{1FA232C6-024E-4085-8A8D-8A065339EF75}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 Insert Module (HKLM-x32\...\{946BF77C-726A-4ABE-9490-585EF18BFBDC}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 OCR Module (HKLM-x32\...\{875294AB-A642-40AF-ABC9-87F8E6AD59BA}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 Review Module (HKLM-x32\...\{2D95BE46-24F6-4065-99AB-BDDB867DCE01}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 Secure Module (HKLM-x32\...\{AAE9B03F-9205-4C26-948F-10584D7D410D}) (Version: 6.1.8.15098 - LULU Software Limited)

Soda PDF 6 View Module (HKLM-x32\...\{719A8CE6-9E05-4321-833C-E84FAD8B68DF}) (Version: 6.1.8.15098 - LULU Software Limited)

SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden

Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden

Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden

TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden

UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden

UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version:  - Tangysoft Ltd.)

VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)

WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden

Windows-Treiberpaket - ASUS (ATP) Mouse  (03/17/2014 1.0.0.207) (HKLM\...\AA2CC56D4BBEE037DC99871F5F6551133D2A0CC3) (Version: 03/17/2014 1.0.0.207 - ASUS)

WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-192083289-1371779681-2328390087-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
 

==================== Restore Points  =========================
 

17-04-2015 17:49:07 Geplanter Prüfpunkt

19-04-2015 19:00:07 Windows-Sicherung

20-04-2015 13:10:08 Installed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

20-04-2015 13:12:44 OpenOffice 4.0.1 wird installiert

20-04-2015 13:43:51 Removed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

21-04-2015 14:26:13 Revo Uninstaller's restore point - Mozilla Firefox 37.0.1 (x86 de)

21-04-2015 14:32:29 Windows Update

21-04-2015 14:32:43 Revo Uninstaller's restore point - Mozilla Firefox 37.0.1 (x86 de)
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {28198945-1BD0-412E-AF7F-89CE88D1E4EB} - System32\Tasks\chipSWU => Cscript.exe "C:\Program Files (x86)\chip\Internet Explorer\swu.vbs"

Task: {2D3A380B-865D-44CD-827A-6CA2CA80F448} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)

Task: {3395A489-0F48-4FDF-BFB4-AC808946233C} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {3E7485B7-4CC9-4259-8E69-62A7FA963BD8} - System32\Tasks\{C653AA2D-C29F-4BDB-9763-6D35C4490CC9} => pcalua.exe -a E:\WinFlash_Win8_64_VER2420\Setup.exe -d E:\WinFlash_Win8_64_VER2420

Task: {48515C69-566C-403E-8480-8D15322B2C4C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

Task: {5B830D2D-3A99-4BFB-88C7-17F82DEFC5D7} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {A256A3B7-D258-4E30-9188-0F602E094BAA} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {A82D695C-6B6D-4CD0-8553-9A180F45A47E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-01-20] (Piriform Ltd)

Task: {E0ED4FB4-3FC7-4A82-BC5F-46239128A5E4} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2014-03-31] (AsusTek)

Task: {E1242B1C-E9EF-4F7E-B202-BC983B6601F5} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)

Task: {ED02416B-B0FB-4695-81B2-B60A76CFDEF6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-15] (Adobe Systems Incorporated)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2015-01-21 04:06 - 2015-01-21 04:06 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll

2015-02-20 05:42 - 2015-02-20 05:42 - 00382072 ____N () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== Internet Explorer trusted/restricted ===============
 

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-192083289-1371779681-2328390087-1000\Control Panel\Desktop\\Wallpaper -> 

DNS Servers: 192.168.192.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-192083289-1371779681-2328390087-500 - Administrator - Disabled)

Gast (S-1-5-21-192083289-1371779681-2328390087-501 - Limited - Disabled)

User (S-1-5-21-192083289-1371779681-2328390087-1000 - Administrator - Enabled) => C:\Users\User
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (04/21/2015 02:48:36 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (04/21/2015 02:48:30 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (04/20/2015 07:55:51 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (04/20/2015 07:48:34 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/20/2015 06:29:01 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (04/20/2015 03:07:09 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (04/20/2015 03:07:03 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (04/20/2015 01:31:20 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/18/2015 09:52:48 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000

Name des fehlerhaften Moduls: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000001915

ID des fehlerhaften Prozesses: 0x1a70

Startzeit der fehlerhaften Anwendung: 0xvlc.exe0

Pfad der fehlerhaften Anwendung: vlc.exe1

Pfad des fehlerhaften Moduls: vlc.exe2

Berichtskennung: vlc.exe3
 

Error: (04/18/2015 07:58:58 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18798, Zeitstempel: 0x5507b864

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000004ad94

ID des fehlerhaften Prozesses: 0x790

Startzeit der fehlerhaften Anwendung: 0xvlc.exe0

Pfad der fehlerhaften Anwendung: vlc.exe1

Pfad des fehlerhaften Moduls: vlc.exe2

Berichtskennung: vlc.exe3
 
 

System errors:

=============

Error: (04/20/2015 07:57:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (04/20/2015 07:57:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (04/20/2015 07:57:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (04/20/2015 07:57:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "ZAtheros Bt and Wlan Coex Agent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (04/20/2015 07:57:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Soda PDF 6 Creator" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (04/20/2015 07:57:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (04/20/2015 07:57:11 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "AtherosSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (04/20/2015 07:57:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (04/20/2015 07:57:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (04/20/2015 07:57:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Intel(R) HD Graphics Control Panel Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

Microsoft Office Sessions:

=========================

Error: (04/21/2015 02:48:36 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CM2X35UP\esetsmartinstaller_deu.exe
 

Error: (04/21/2015 02:48:30 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CM2X35UP\esetsmartinstaller_deu.exe
 

Error: (04/20/2015 07:55:51 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\Downloads\esetsmartinstaller_deu.exe
 

Error: (04/20/2015 07:48:34 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/20/2015 06:29:01 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe
 

Error: (04/20/2015 03:07:09 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\Downloads\esetsmartinstaller_deu.exe
 

Error: (04/20/2015 03:07:03 PM) (Source: SideBySide) (EventID: 80) (User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\User\Downloads\esetsmartinstaller_deu.exe
 

Error: (04/20/2015 01:31:20 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (04/18/2015 09:52:48 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: vlc.exe2.1.5.000000000vlc.exe2.1.5.000000000c000000500000000000019151a7001d07a01649ee32cC:\Program Files\VideoLAN\VLC\vlc.exeC:\Program Files\VideoLAN\VLC\vlc.exe7c7616c5-e604-11e4-9bb6-ac9e17d23840
 

Error: (04/18/2015 07:58:58 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: vlc.exe2.1.5.000000000ntdll.dll6.1.7601.187985507b864c0000005000000000004ad9479001d079f4630ca995C:\Program Files\VideoLAN\VLC\vlc.exeC:\Windows\SYSTEM32\ntdll.dll957dde47-e5f4-11e4-9bb6-ac9e17d23840
 
 

==================== Memory info =========================== 
 

Processor: Intel(R) Pentium(R) CPU N3540 @ 2.16GHz

Percentage of memory in use: 34%

Total physical RAM: 8079.99 MB

Available physical RAM: 5326.48 MB

Total Pagefile: 16158.17 MB

Available Pagefile: 12683.63 MB

Total Virtual: 8192 MB

Available Virtual: 8191.85 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:698.54 GB) (Free:518.28 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: E06598BF)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=698.5 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Die beiden scheinen sehr hartnäckig zu sein :-(

Das sind doch nur Installer im Downloadordner. Downloadordner leeren und gut is :)

Ja dann ist gut, wenn du es sagst, wird es wohl stimmen.
Danke schön

http://deeprybka.trojaner-board.de/b...cleanupneu.png
Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
http://deeprybka.trojaner-board.de/b.../combofix2.pngCombofix deinstallieren

Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
Drücke bitte die http://deeprybka.trojaner-board.de/b...ne/revo/w7.png + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
Klicke auf OK.
Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.

Schließe alle offenen Programme.
Starte die delfix.exe mit einem Doppelklick.
Setze vor jede Funktion ein Häkchen.
Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:

http://deeprybka.trojaner-board.de/b...ast/schild.png
Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.
Meine Empfehlung:
http://filepony.de/icon/emsisoft_anti_malware.png
Emsisoft

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
http://filepony.de/icon/noscript.png NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.

Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .

Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Vielen Dank für deine Hilfe.
Ich hoffe, jetzt habe ich wieder Ruhe ;-) und du auch.